Management Site
API Mode (not leaving the page)
For SPAs and fetch() calls - shows auth in an iframe overlay:
Browser Mode (full page)
Block access to otherwise open site - intended for forward-auth mechanism (Caddy, Nxinx):
Click a button to test...