Access control
The administrator account is fixed to phammanhthang87@gmail.com. Additional users are read from the Cloudflare secret ALLOWED_EMAILS. Authorized emails are managed server-side from the Admin Panel. Users sign in with Google using an email on the server-side whitelist.
Loading authorized emails…
Deployment checklist
1. Keep AUTH_SECRET configured. 2. Keep GOOGLE_CLIENT_ID configured with the OAuth client created in Google Cloud. 3. Manage authorized Google/Gmail emails from the Admin Panel; ALLOWED_EMAILS may still be used as the initial fallback list. 4. Deploy the folder with Cloudflare Pages Advanced Mode using _worker.js.