What the app sign-in routes need.
Readonly
Accessor returning the current per-request portal runtime.
Resolver reading the browser session from a request.
The store bag the refresh-token store is opened from.
What the app sign-in routes need.