# verae-staff-session

Shared cookie login for CS / sales / accounting / access-staff HTML.

**Forgejo:** https://git.georgelambert.org/marchon/verae-staff-session

Port `:3027`. Set `STAFF_AUTH=1` on the department servers and `STAFF_SESSION_URL=http://127.0.0.1:3027`. Cookie host is the browser host (ports share `127.0.0.1`). JSON APIs stay open unless you also send `x-staff-key`.

Default key: `STAFF_KEY` or `ADMIN_KEY` or `admin-dev-key`.