session provider-isolated OAuth
identityNo authenticated session
Preparing protected access…
07 module
Authenticate, then disclose the minimum.
Identity is verified by the protected Worker before contact, resume, or private learning material leaves server-side storage.
boundary what remains public
The client proves identity. The server decides access.
Firebase’s browser configuration and this small sign-in client are public by design. Tokens, authorization decisions, contact data, resumes, credentials, and protected notes are never embedded in the static site.