Signed-in profile
- User
- Loading…
- Role
- Loading…
Profile editing will be enabled when its authenticated API is available. No local copy is created.
Settings
Configure the workspace and review production integration readiness.
YOUR ACCOUNT
Loading…Profile & password
Review your signed-in account and update its password securely.
Passwords stay ephemeral.
They are submitted only to POST /api/auth/change-password over the same origin. They are never written to localStorage or retained by this page.
WORKSPACE
Browser-local prototypeWorkspace preferences
Display defaults for this browser while the account API is being built.
EMAIL DELIVERY
Checking…Resend integration
Transactional and operational client email, configured exclusively on the server.
Checking server configuration
Requesting integration status from the AFTERDARK API.
No API key entry here—by design.
RESEND_API_KEY must be supplied to the backend process through its protected environment. AFTERDARK never asks the browser to collect, store, or transmit it.
Server requirements
- Resend API key configured in the server environment
- Sending domain verified with Resend
- From address authorized for that domain
- Webhook signature verification enabled
- Consent and client-scope checks enforced
Integration contract
- Status
GET /api/integrations/resend/status- Send
POST /api/email/send- Secrets
- Server environment only
CLOUD STORAGE
Not configuredCloud storage readiness
No cloud provider is connected here. Client uploads are available in the private media library.
Production checklist
- Private object-storage bucket with public access blocked
- Short-lived signed upload and download URLs
- Encryption at rest and TLS in transit
- Per-client object prefixes and authorization checks
- Malware scanning and MIME/type validation on ingest
- Retention, deletion, backup, and restore policies documented
- Access events written to the audit log
Provider credentials and destructive storage actions will only be available through an authenticated backend and audited administrative workflow.
ACCESS & COMPLIANCE
Review requiredSecurity readiness
Required controls before real client accounts or private media enter the system.
Production checklist
- Authenticated sessions with secure, HttpOnly, SameSite cookies
- Multi-factor authentication for administrative users
- Role-based access and client-level data scoping
- Encryption for sensitive fields with managed key rotation
- Immutable audit events for access and administrative changes
- Age/identity verification and release records stored securely
- Rate limiting, CSRF protection, and security headers
- Incident response and account-recovery procedures tested
This page intentionally contains no session-reset, key-rotation, data-deletion, or permission-changing controls.