Cloudflare Access

Authentication is handled by Cloudflare Access. A JWT cookie CF_Authorization is set after authentication.

Note

Flow: The frontend parses the JWT to extract the email from the payload (payload.email). As a fallback, the /cdn-cgi/access/get-identity endpoint is used.