Authentication

ARMS uses email and password only. Register a new account, then sign in. There is no seeded default user and no Google or GitHub sign-in in the product documentation.

Register

1. Open /register on your ARMS instance (local UI is typically http://127.0.0.1:3000/register).
2. Enter email and password.
3. Submit to create the account and start a session (or complete onboarding if prompted).

Sign in

1. Open /login.
2. Enter the same email and password.
3. Submit to open a session.

Forgot password

Use Forgot password on the login form (/forgot-password). Enter your email. If the address is registered and mail is configured, a reset link is sent. The UI does not confirm whether the address exists.

Session configuration

Sessions use NextAuth.js. Set:

Variable	Purpose
NEXTAUTH_URL	Exact public URL of the UI
NEXTAUTH_SECRET	Must be identical on apps/web and apps/api

See Configuration for SESSION_MAX_AGE_SECONDS and login rate limits (LOGIN_RATELIMIT_MAX_ATTEMPTS, LOGIN_RATELIMIT_WINDOW_MS). NEXTAUTH_SECRET is also the Vault encryption fallback when ELSAI_VAULT_ENCRYPTION_KEY is unset.

In production, serve ARMS over HTTPS.

After you sign in

Create an API key under Settings → API Keys (/settings/api-keys) for ingest and Vault. Configure organisation and database under Configuration → Organisation.