Google OAuth login for admin panel with configurable allowed domains.
Auto-creates administrator with configurable role on first login.
Blocks password login and password change for OAuth accounts.
Session expiration configurable (default 12h) for automatic revocation.
Active account verification on every request.

Co-Authored-By: Claude <noreply@anthropic.com>