Zhik · EU Digital Product Passport

DPP Console

RuleHow this form decides what to show
  1. Microsoft (Entra ID) is the only sign-in method on a hosted deployment.
  2. The email + password form renders only when NEXT_PUBLIC_SUPABASE_URL points at localhost or 127.0.0.1 — a host check, not a feature flag, so a hosted deployment cannot expose it by forgetting to switch something off.
  3. Signing in proves who you are. It does not grant access: that comes from an active row in dpp.app_users.

Source: Zhik DPP build plan §B — console shell and auth (25 Aug 2026)