Rajasthan Groundwater Intelligence · server-verified access

Sessions live in httpOnly cookies; role checks run in server middleware. Production: RajSSO/Parichay OIDC + TOTP (SECURITY.md).