# Is generated-app login separate from Uvilno's creator account?

Canonical: https://uvilno.com/answers/is-generated-app-login-isolated-from-builder
Updated: 2026-10-27

Uvilno's app authentication uses project-scoped visitor identities and sessions, separate from the creator's platform login. Configured Google, GitHub, Discord and email flows must not replace builder cookies. Verify both identities around sign-in, sign-out and reload; a separate login page alone does not establish session isolation.

The creator and the visitor have different jobs and privileges. A website visitor should never become the builder account simply by completing an OAuth flow in the preview. Tokens and callback state must remain scoped to the intended project and application origin.

Test at least two projects and two disposable visitor identities. Sign into the generated app, reload it, sign out and confirm the platform still shows the original creator. Exports need their final supported HTTPS origin registered; copying a callback URL from the builder is not a migration strategy.

## What to verify

| Check | Published behavior | Verification |
| --- | --- | --- |
| Visitor identity | Managed sign-in is scoped to the generated project. | Check the app user before and after authentication. |
| Builder identity | Platform cookies remain independent. | Keep the creator profile open while testing sign-in. |
| Exported origin | Hosted sign-in needs approved origin configuration. | Test the final host's redirect and session flow. |

## Steps

1. Record the current builder identity.
2. Sign into the generated app with a disposable visitor.
3. Reload and sign out, then confirm the creator is unchanged.

## Editable starting brief

Plan a project-scoped account flow with Login, Register and Profile for a private application. Use only the managed app authentication interface, never the creator's platform session. Include clear failed and pending confirmation states, a real sign-out action and a test that the builder user stays unchanged throughout app login and reload.

## Sources

- [Uvilno public SDK documentation](https://uvilno.com/docs)