TGIR QuantLib Tools Flask workstation with session-protected access and shared QuantLib pricing services.
Protected workstation
Architecture Fit

Low-cost auth without a stack rewrite

The broader app standard prefers Clerk, React, and FastAPI. This sandbox intentionally stays single-app Flask, so the lowest-cost compliant move is a server-side login gate with strong env secrets, protected sessions, and a public health endpoint.

Protected routes Dashboard, trade editors, reset, and realtime pricing calls all require authentication.
Centralized config `.env` values are loaded once and mapped into the Flask app factory for cleaner growth.
Stable pricing core QuantLib portfolio logic remains in `portfolio.py`, separate from view and session concerns.