apps.boloy.me · phase 1 (renderer wired to sites.boloy.me · the editor is next)
Boloy websites
This one process is two front doors: the dashboard here, and a website on <name>.boloy.me. Whatever you make here is stored by sites.boloy.me — this app only ever asks it, with your session.
Sign in to manage websites
A website belongs to an organization, and who may change it is decided there — so this dashboard has to know who you are before it can show you anything. Signing in happens at auth.boloy.me. What comes back is an encrypted, HttpOnly cookie that this app's server reads; your browser's JavaScript never sees a token.
Editing the sections of a page is the next piece of work, and the form for it will be generated from the engine's registry — so a section type gains its editor at the same time it gains a renderer.