You reached the protected origin.

This page is a static Cloudflare Pages deployment with no auth of its own. Everything in front of it was done by the oidc-demo-auth Worker, not by a Cloudflare Access application — so viewing it consumed no Zero Trust seat.

Gate

Worker · OIDC authorization code + PKCE

Session

HS256 JWT cookie, 24h

Origin

oidc-demo.pages.dev

The Worker forwards the verified identity upstream as X-Authenticated-Email, the same way Access sends Cf-Access-Authenticated-User-Email. A static page can't display it — a real origin would read it from the request.

Sign out