auth.madcoolhifi.com

SSO bridge

No active session. Sign in.

This subdomain hosts the sign-in flow for madcoolhifi.com. It is not a public destination; users land here only mid-auth.

/sign-in

Supabase magic-link (email OTP via Fastmail SMTP).

/auth/callback

Magic-link landing target; exchanges the PKCE code for a Supabase session cookie, then forwards into /bridge if SSO params are present.

/bridge

Satellite-redirect target; mints a single-use auth_code keyed to the return_to origin and redirects back with ?code=&state=.

/api/exchange

Server-to-server code redemption. Bearer-authed with the rotating shared secret, returns a signed HS256 session JWT + session info.