Sign in and sessions
Dashboard sessions are backed by a hand-rolled HS256 JWT signed with your workspace secret
When you log into the dashboard, WebOptiva gives your browser a signed token instead of storing your password anywhere in the browser.
That token is checked on every request to confirm it's really you and that it hasn't been tampered with.
It's built in-house rather than through a third-party login library, but the idea is the same one most modern web apps use.