Phase 0 · Complete

Identity stays server-side.

SvelteKit owns the OAuth session, Redis stores encrypted tokens, and Go validates the provider access token. The browser receives only an opaque application cookie.

Open LotoSportCrushers → Open the playground → Open saved workspace →

Foundation status

Complete

01

Go API

Available

Typed response: ok

02

Application identity

Your app session starts only after you choose Sign in.

Sign in

03

Request trace

Correlate the same-origin SvelteKit proxy with the canonical Go operation.

req_39c346b7609e7d5239291593f688335d