Login

The Login page is the entry point to the CampOne admin dashboard. It is a single-card form on a plain background with the CampOne logo at the top — there is no sidebar, no top-bar, no navigation. You arrive here either because you opened CampOne for the first time, your session has expired, or you have just clicked Logout in the sidebar footer.

The page itself is intentionally minimal. Most of what is interesting about authentication happens after you log in — your session is bound to your tenant via your JWT, and your role decides which sidebar entries you see.

How to find it

There is no sidebar on this page; it is the screen that appears before you have one. The URL is /login on whatever domain your tenant uses (for example app.campone.ch). After a successful sign-in you are routed to the dashboard automatically; logging out from any other page sends you back here.

What is on the page

• CampOne logo, centred near the top.
• Heading — “Anmelden” (“Sign in”).
• E-Mail field — your login email. Required, autofocused on page load.
• Passwort field — masked, required, browsers may offer to fill saved credentials.
• Sign-in button — labelled Anmelden. Disabled and shows Wird überprüft… (“Verifying…”) while the request is in flight.
• Error banner — only appears after a failed attempt. The page handles three common cases:
  • Wrong email or password — “Falsche E-Mail oder Passwort.”
  • Too many attempts (rate limit) — “Zu viele Anmeldeversuche. Bitte später erneut versuchen.”
  • Server error (5xx) — “Server-Fehler. Bitte später erneut versuchen.”

The page does not currently include a Forgot password link, a language picker, an SSO button, or a “remember me” checkbox. The interface language follows your browser preferences. If you need a password reset, contact your CampOne administrator or open a support ticket.

Common workflows

Log in for the first time

1. Type the email address your tenant admin used to create your account.
2. Type the initial password they gave you.
3. Click Anmelden. You are taken to the dashboard appropriate for your role.
4. As soon as you are in, change your password from your user record (Team tab on Settings).

What happens after a successful sign-in

• A short-lived JWT access token is held in browser memory; a long-lived refresh token is set as an httpOnly cookie. You do not need to do anything with these.
• Your role decides where you land:
  • superadmin — the CampOne internal control plane (/superadmin).
  • tenant_admin and staff — the dashboard (/).
• Your tenant is resolved automatically from your JWT or from the domain you logged in on.

What to do if your password is rejected

1. Check that you are using the correct email — campsites sometimes have one address for the company and another for individual staff.
2. Try again. After several wrong attempts the page returns the rate-limit message; wait a few minutes before retrying.
3. If you still cannot log in, ask a tenant_admin to reset your password from the Team tab on Settings, or open a support ticket from a colleague’s session via Help.

The impersonation banner

If you are a CampOne staff member who has been granted approved support access to a tenant, logging into that tenant shows a thin banner across the top of every page reminding you that you are impersonating. The banner is not part of the login screen — it appears on the dashboard and on every other page once you are signed in. The same banner is invisible to ordinary tenant users on their own logins; only the impersonating CampOne staff member sees it.

If you are a tenant operator and you see CampOne traffic in the Support inbox labelled Activated, that means an impersonation session is running with your approval. Revoke approval there if you want to end it.

Tips and gotchas

• The email field is autofocused, so you can start typing immediately — no need to click first.
• Browsers offer to save credentials. If you let them, the next visit is one click. CampOne does not pre-fill anything itself.
• The page is in German by default. The login screen does not currently expose a language selector — translation lands when you reach the dashboard, which then follows the language picker in the sidebar footer.
• “Forgot password” is not currently implemented as a self-service flow. You need an admin to reset your password.
• A 401 and a 400 from the server both produce the same “Falsche E-Mail oder Passwort” message — the page deliberately does not say which of email or password was wrong, to avoid leaking whether an account exists.
• If logging in seems to succeed but the page redirects back to login, your tenant resolution failed (no matching tenant for your domain). Contact CampOne support.

Related pages

• Help — open a support ticket if you cannot get in
• Roles and permissions — what each role can see after a successful login
• Settings — Team tab, where tenant_admin resets staff passwords
• Support inbox — review or revoke impersonation sessions for your tenant