Identity-aware operations · AppX Cloud

AppX
Cloudgateway-first frontend

Sign in, inspect account context, and run admin flows through one gateway-backed frontend that keeps browser traffic on appx-cloud.com.

Sign in with ZITADELInspect current session
4
Core operator surfaces
1
Gateway-owned session
0
Tokens in browser storage
Platform surfaces

Purpose-built views for real account flows

The interface is intentionally narrow: it starts gateway auth, shows the synced user context, exposes admin impersonation when allowed, and keeps EAN operations behind the same server-side boundary.

Landing

Public entrypoint

A public overview that explains what the platform does and funnels users into the login flow or their existing session.

Account

Current user context

A clean account page backed by the synced user directory, with active impersonation state visible when present.

Admin

Impersonation console

Role-aware search, token exchange initiation, and an explicit end action instead of hidden session state.

EAN

Operator inventory tooling

Admin-only GTIN and product workflows share the same visual language and gateway proxy constraints as the identity screens.

Runtime contract

Browser-facing, server-proxied

AppX Cloud presents a calm account surface while proxy handlers keep Spring Gateway cookies, token introspection, metrics, and admin actions out of client-side storage.

Auth
OIDC

Gateway authorization redirect to ZITADEL.

Ops
BFF

Server-side route handlers proxy backend APIs.