This page is a separate frontend from the Policies playground. It demonstrates OIDCPolicy browser login at the Gateway and then renders a protected ESPN MLB scoreboard.
Loading…—
—Session: —
Protected MLB scoreboard
View
What is happening?
/secure/mlb
If you are not logged in, the Gateway will redirect you to Keycloak.
After login, the Gateway stores a session token in a cookie and you can access the protected route.
The backend never sees unauthenticated traffic: enforcement happens before the request reaches the service.