NewsFlip account

Sign in to the review desk.

Magic links use Supabase Auth. Admin permissions are stored in `public.profiles.is_admin`, never in user-editable metadata.

Back to the game

Secure entry

Email link

Setup readiness

Supabase URLready
Publishable keyready
Profile bootstrapmissing
Admin email listmissing

Admin promotion requires the server-only profile bootstrap and an email listed in `ADMIN_EMAILS`.