Streaming Hub
A private family hub for shared streaming accounts that fetches sign-in codes straight out of my inbox.
Overview
The household shares a rotating set of streaming subscriptions (Netflix one month, HBO Max the next), all registered to my email. Every time someone else signs in, the service mails a one-time code to me, and I used to forward it by hand.
The Streaming Hub fixes that: a login-gated page on this site where four seeded family members can see which services are active right now, reveal the shared account login, and fetch the latest verification code with one click. Behind the button, the server searches my Gmail over IMAP for fresh mail from that service's known sender addresses and extracts just the code; the mail itself never leaves the server.
There is no public signup and no passwords. Each family member is seeded by email, signs in with a one-time magic link mailed through ZeptoMail, and can then register a passkey for a one-tap sign-in afterwards. Stored service passwords are encrypted with AES-256-GCM, and every login, credential reveal, and code fetch lands in an audit trail.
Highlights
- One-click OTP fetching over Gmail IMAP with per-service sender and code patterns
- Seeded users only: passwordless sign-in via a mailed magic link, with an optional passkey
- Shared account credentials AES-256-GCM encrypted at rest, decrypted only on reveal
- Active/inactive toggles so subscription rotation is a click, not a deploy
- Full audit trail: login counts plus per-user events for reveals and code fetches
- HMAC-signed session cookies and rate limiting reused from the site's project gate