Hey Railway team!

Right now, accessing an interactive service terminal or opening the web database interface only relies on the initial account login session. Once logged into the dashboard, anyone with access to an active browser session can instantly spawn shell access or query production databases without any step-up verification.

It would be a huge security improvement to support 2FA re-authentication specifically when trying to:

• Open an interactive service terminal
• Access the web-based database UI

Thanks for considering this!