星城
Restricted platform control
Sovereign control plane
Administrator secure sign-in
Platform administrators only. Merchant, operator, marketing and app sessions are denied.
- Administrator sign-in requires a completed six-digit MFA challenge.
- Web sessions use Secure, HttpOnly and SameSite cookies. Writes require CSRF and Origin validation.
- Only configured XC Malls portal hosts are accepted as return targets. External, non-HTTPS and user-info URLs are rejected.
Environment: internal-preview
Restricted platform control
Administrator secure sign-in
Administrator sign-in requires a completed six-digit MFA challenge.
Web sessions use Secure, HttpOnly and SameSite cookies. Writes require CSRF and Origin validation.
Only configured XC Malls portal hosts are accepted as return targets. External, non-HTTPS and user-info URLs are rejected.