Admin console

Connect

Paste ADMIN_API_KEY from Railway → Auth Hub → Variables, then click Connect. App teams should use the client portal — they never need this key. Your key is remembered for this browser tab only (cleared when you close the tab).

Admin API key

Not OAuth secrets. Hub operator sign-in uses SEED_ADMIN_EMAIL / SEED_ADMIN_PASSWORD at /login.html. This console uses ADMIN_API_KEY only.

Action needed

Recent sign-ins

Time	Event	Client

Register client

Enter the company name and website — we infer client ID, return URLs, CORS, sign-in branding, and webhook settings automatically.

Company / app name

Website URL

Production domain only — local dev URLs are added automatically.

Project type

Advanced settings (optional)

Client ID

Auto-inferred from domain. Used as AUTH_CLIENT_ID.

Return URLs

Comma-separated. Use /* wildcards.

After login: —

CORS origins

Exact origins for browser token exchange. No wildcards.

Token exchange from: —

Sign-in providers

Customer slug

For client projects — auto-inferred from domain.

Roalla product (internal)

Your own apps. Uncheck for third-party customer apps.

Auth email From address

Verify/reset mail. Must match Brevo. Blank = hub default (experience@domain).

Product email From address

Welcome/notifications via hub mail API.

Manual steps after registration (email & DNS — not automated)

Registration tokens

Give app teams a scoped token instead of ADMIN_API_KEY. Shown once on create.

Label

Max uses

TTL (hours)

Restrict customer_slug

Internal product token

Only for Roalla-owned app registrations.

Label	Uses	Expires

Webhook queue

Worker runs every 60s. Inspect failures or force processing.

Status

Client	Event	Status	Retries	Updated

Admin console

Connect

Action needed

Recent sign-ins

Registered apps

Register client

Registration tokens

Webhook queue