role-based access · guest enabled

Basic page is available without login.

Guests can view public pages. Signing in unlocks user-only navigation, profile details, and role-aware controls.

Frontend: jett-w.us · Backend API: api.jett-w.us/healthz

Guest role

Default role for visitors without a Keycloak session. Guests can view Home and Status.

Authenticated users can access the Dashboard area and account management.

Admin-only UI is isolated behind the admin role check.

public status

This page remains visible to guests and authenticated users.

jett-w.us served by nginx behind Caddy and Cloudflare Tunnel.

user area

Visible after login. Add private app widgets here as the backend grows.

Loading profile…

Loading permissions…

Move sensitive data behind server-side role checks before adding real private content.

admin area

Only users with the admin role should see this page.

UI checks are not a substitute for backend authorization on dangerous actions.

Loading roles…

permission needed

This page requires a higher role than your current session has.