Sign in with email & password
Sign-in is done right, finally.
We rebuilt authentication from the ground up: email + password, required email verification, and sessions backed by short-lived signed JWTs instead of long-lived cookies that quietly become a liability. Every request gets checked against that token before anything happens -- nothing slips through unauthenticated.
Here's what shipped:
- Email + password sign-in, gated behind email verification so unverified accounts can't touch your data.
- Secure sessions issued and verified via ES256-signed JWTs -- the same auth layer every other Morphr service trusts.
- Workspace roles, built into the API -- editor and viewer permissions already exist under the hood. The team-management screen to invite people and assign roles is next.
This is the foundation everything else on the roadmap stands on. Up next: Google & Apple sign-in for one-click login, and the frontend to go with the roles we already built.
Sign in and try it: app.morphr.link
Sign in with secure sessions
You shouldn't have to think about how sign-in works -- just that it's fast and it holds. Sign-in runs on email + password with required email verification, backed by sessions issued as short-lived, ES256-signed JWTs instead of a plain session cookie. Every authenticated request gets that token checked before anything happens. Why it matters to you: You stay signed in -- close the tab, come back tomorrow, still logged in. No mystery logouts. Verified accounts only -- email verification is required before an account can touch any data, which keeps throwaway and spam signups out from day one. It's the foundation, not a bolt-on -- Google/Apple sign-in and workspace roles both build on this exact same session layer. We wanted the boring, load-bearing part of the product -- token expiry, verification, session handling -- solid before building the exciting parts on top of it. Everything else on this roadmap sits on this.
0
