Loading the dashboard — asking this host who you are
The dashboard needs JavaScript: it signs you in with a link sent to your email address and is then a client for the guarded /api/dashboard/* routes, so there is no server-rendered version of it. The operator path is the same reads over HTTP with the reload secret in the x-clawharbor-reload-secret header.
/api/dashboard/*
x-clawharbor-reload-secret