Acme Utilities · Legacy Portal
Sign in
A plain <form method="POST">. The server answers with a redirect to its own absolute URL and an HttpOnly session cookie — the two things a reverse proxy usually breaks.
Session
Signed in as …
That name comes from a fetch('/api/whoami') issued by this very page — a same-host call with the browser's cookies, no SDK, no library.