Authentication is handled by Supabase Auth with Google as the identity provider. New sign-ins are automatically provisioned with Viewer access and can be elevated later by an Admin.