Account

Use a fictional shopper account to see a browser profile connect to a server-verified session.

Sign in to the demo

These credentials exist only in this local example and carry no access outside it.

Fictional demo accounts: sora@example.com, jiwon@example.com / password: shop-demo-1234

Why the server wins

The browser announces a profile with identify(). The server verifies it from the session through createReopt's getProfileId resolver. Because a page can modify a cookie but cannot forge the server session, the server value takes precedence. The resolver runs once per request.