Signing in to the console

Every operator signs in with a password and a code from an authenticator app — there is no way to use the console with a password alone. Operator accounts are created on the server with flask create-operator; there is no sign-up.

The console is a separate system from the salons' own: a salon's staff account cannot sign in here, and an operator sign-in gives no access to a salon's pages.

Everything an operator does is recorded in the operator activity log, which no one can edit.