If login takes longer than the lookup, people will share a password on a sticky note. Fast auth is a safety feature.
Tags: Auth, React, Supabase, UX, unlisted
I keep sessions long enough for a shift, with a silent refresh. I do not bounce them to a login page in the middle of a count if I can refresh in place.
Shared-device mode matters: a big switch-user on the home screen. Sticky notes are what you get if you pretend each phone has one soul.
Roles, not mystery 403s
If they cannot edit location, the button is gone or explained. A dead tap is not security. It is a rumor that the app is broken.
Recovery without the IT ticket theater
A lead should be able to unblock a seasonal hire without me. If I am the IdP, I failed the staffing model.
