Shared Security Control Plane

One auth layer for Infinity, Alpha Pro, and Apex Signal.

This site is the central Netlify auth backend. The branded login modal stays inside each app, but the affiliate verification, session cookie, Telegram lookup, and shared access decisions live here so you only update security once.

Shared Here

  • Affiliate lookup and Quotex validation
  • Session issue, session refresh, and logout
  • Shared Telegram affiliate access flow
  • Bridge to the single Infinity Cloudflare worker

Stays In Each App

  • Its own branding, modal copy, and layout
  • Its own frontend features and APIs
  • Its own SECURITY_APP_ID for app-wise limits

Session Model

  • One parent-domain cookie shared by all subdomains
  • One login works across all three apps
  • Usage limits stay separate by app id in the worker
Session: /.netlify/functions/session
Login: /.netlify/functions/auth
Logout: /.netlify/functions/logout
Bot webhook: /.netlify/functions/telegram-bot-webhook
Deploy this site on a dedicated auth subdomain such as auth.yourdomain.com and set SESSION_COOKIE_DOMAIN=yourdomain.com so the login persists across all app subdomains.