This project now implements a production-oriented Auth0 architecture with:
- Native in-app account entry pages (
/account-selection,/admin/login,/admin/signup,/courier/login) - Role-aware route guards for admin and courier areas
- Remember-me behavior (memory vs local-storage token caching)
- Auth callback route handling and route restoration
- Secure server-side Auth0 Management API integration for courier provisioning
- Install dependencies:
npm install
- Create
.envfrom.env.exampleand fill real values. - Start frontend:
npm start
- Start backend API (separate terminal):
npm run start:api
Detailed setup is documented in docs/auth0-setup.md.
AUTH0_CLIENT_SECRET is server-only. Do not place it in REACT_APP_* variables.