All docs / Build
App access control
Apps are private until you say otherwise: sign in with RandallFlare, one-time email codes, service tokens for scripts, or public with one switch.
Open in the consoleEvery app starts private. Until you allow someone, they see a sign-in page instead of your app on every one of its addresses: the automatic one, your custom domains and preview addresses alike. Open Access on the app's page to choose who gets in, or switch the app to Public when it is meant for everyone.
Who can open a private app
- You, always.
- RandallFlare users you list by username; they sign in with their own account.
- Email addresses and domains you list, such as
alice@example.comorexample.com. These people get a one-time code by email; no account is needed. - Scripts that present a service token (below).
What visitors see
- 1On the first visit the edge sends them to a sign-in page on randallflare.com that names your app.