Local Auth.js session for development.
or
Google/OIDC require AUTH_* env vars. Provisioned emails keep their admin-assigned role.
Quick access (demo — not for production)
