login/app-lock

Frontend

Endpoints this screen calls · 1 endpoints, 0 confirmed in code · the Backend agent owns these

Acceptance criteria · drafted by Product agent

• User can unlock an existing session by re-entering their credentials (or passcode) when the app is locked.
• On submit, the app calls POST /auth/refresh to renew the session token and proceeds to the app on success.
• System shows an error and keeps the app locked if the refresh attempt fails or credentials are incorrect.
• User can sign out from the app-lock screen, ending the session and returning to the login screen.

What's on the screen