demo-listed / demo apppublic · listed

Listed demo

Mode: public, listed. No sign-in is needed, and this app appears in the public directory at auth.repo.box (and in /api/directory).

What you are looking at

  • A static page served by Caddy's file_server from a platform-managed root.
  • The route was generated by repobox-platform routes render with the same shape as every managed app: strip browser identity headers, ask the control plane, serve.
  • For a public app the control plane answers "public" and injects no identity. If you are signed in and launched it from the directory, the edge injects your identity as well, which a dynamic app could use.
  • The owner can flip visibility or disable the app on auth.repo.box; the edge honours it on the next request.

Check it yourself

  • curl -I https://demo-listed.repo.box/ → 200 with no cookie required.
  • curl https://auth.repo.box/api/directory → this app is in the list.