Login and Authentication

Access to QubePro applications is provided through platform-based authentication. After logging in, user permissions are determined on an application basis.

Input Stream

1. User logs in with email/username and password.
2. Platform API authenticates the session.
3. The user's role, company (customer/company) and authorization information are transferred to the application.
4. Menus and screens open dynamically according to user authority.

Session Management

• Sessions are managed based on cookies and/or tokens.
• In expired or invalid sessions, the user is directed to the login screen.
• The logout process clears both client-side data and server-side session information.

Authorization

• Role-based access control (RBAC) is applied.
• Some pages are only open to admin or users with special roles.
• The same authorization checks continue on the API side.

Safety Recommendations

• Use strong password.
• Do not leave the session open without logging out on shared devices.
• Change your password in case of suspicious login attempts.