Local auth requires plain Auth works locally only when served through . NEVER use the native dev server ( , , , , etc.) for auth development — the Catalyst auth middleware, cookie injection, and are only available through . How It Works 1. Identify flow type — Hosted login (redirect to Catalyst login page), embedded login (custom UI), or backend check. 2. Load — for signup/login flows, ZAID gotcha, hosted vs embedded login, and common auth errors. 3. ZAID warning — ZAID differs between Development and Production. This is the #1 auth issue in production. Always verify the environment. 4. Secur…