SECURE SETUP PORTAL
Identity federation / owner activation

One identity.
Every connection.

A Cloudflare-hosted, mobile-ready control surface while Google and GitHub provider registration and the isolated database acceptance are completed.

Authentication remains closed. This preview provides live setup links and diagnostics, not a simulated Google or GitHub sign-in. The backend must pass credential, migration and callback gates before any login is enabled.
GSETUP REQUIRED

Google identity

Create a Web application client, not a Desktop client. Start with OpenID Connect identity scopes only. Keep the existing Rclone client unchanged.

Open Google OAuth Clients ↗

Configure test users ↗

⌘SETUP REQUIRED

GitHub identity

Register the application's OAuth settings using the final verified backend callback host. GitHub source access is not the same thing as an OAuth application.

Open GitHub OAuth Apps ↗

Review secure backend PR #77 ↗

DBMIGRATION GATE

Identity database

Neon pilot project is separate from CPX production. Schema generation and migration must be verified against the exact dedicated database before enabling accounts.

Open Neon console ↗
✓HTTPS ENABLED

Preview diagnostics

HTTPS transport, strict response headers, fail-closed auth paths, and an explicit setup-only state. No passwords, OAuth secrets, or tokens are collected.

Open status endpoint ↗

Cloudflare staging only. No CPX production DNS changes. Google, GitHub, and Microsoft provider permissions are never requested from this page. Never paste credentials into chat or this portal.