Authentication & Access Control
Understand how CareNova handles authentication, user roles, and permission management through its role-based access control system.
- Authentication FlowLearn how CareNova handles user authentication, session management, email confirmation, and the pending approval workflow.
- Rate Limiting & Brute-Force ProtectionA detailed look at how CareNova prevents brute-force attacks, tracks authentication attempts, and protects login endpoints.
- Session handling & trackingHow CareNova creates, validates, refreshes, and tracks user sessions using Supabase SSR and the user_sessions table.
- Roles & PermissionsA complete reference for CareNova's four user roles, the full permissions matrix, how permissions are enforced, and how to customize them.
- Audit logsHow CareNova records authentication events in auth_audit_log, what gets captured, and how admins can query and monitor system activity.