How does our authentication system work?
AI answerUsers authenticate against our auth service in the monorepo. This was recently migrated from a legacy external authentication service. First-party web clients still use session cookies; the auth database is shared with billing entitlements, which constrains how aggressively we can write to it.
Connected knowledge
- Component Auth Service
Users authenticate against the auth service in the monorepo. Migrated from a legacy external provider in 2024.
- Decision Keep session cookies
Rejected token-only auth for first-party web clients — session cookies remain the primary path.
- Incident Auth outage · Mar 2025
Connection pool exhaustion in the auth DB caused cascading login failures for ~40 minutes.
- Constraint Shared identity store
Auth DB is shared with billing entitlements. Don't add heavy write paths without capacity review.