Secure Portal

Magic-link access for client material and future secure features

This portal is designed to sit behind Azure Functions, Cosmos DB, and Key Vault. Authentication uses email-based magic links so you can avoid password handling in v1.

Current Plan

Auth flow

User requests access with email.
Azure Function issues a short-lived magic link.
Resend delivers the login email.
Cosmos DB stores users, pending links, and sessions.
Blob Storage can later hold private documents tied to the account.

Documents

Authenticated document space backed by Cosmos metadata and private Blob storage

Access Model

Authenticated users can list private documents through the portal. Each download is authorized by the backend before Blob access is allowed.

Private Blob

Client material stays in a private Blob container. Public exposure is avoided by routing access through Azure Functions.

Portal Session

No active session detected yet. Once auth is wired with Azure settings, this area can load user-specific content.