Const
Admin-dashboard users — keyed to Cloudflare Access identity instead of PropelAuth. Upserted on first request via the cf_access_sub claim; the row exists before a role is assigned so a fresh user can hit /forbidden deterministically.
cf_access_sub
/forbidden
Admin-dashboard users — keyed to Cloudflare Access identity instead of PropelAuth. Upserted on first request via the
cf_access_subclaim; the row exists before a role is assigned so a fresh user can hit/forbiddendeterministically.