How this app authenticates

Auth mode
hosted
Hosted mode
The incoming session cookie is forwarded to the API, which verifies it. Sign in again, then reload this screen.
Local mode
The API trusts development identity headers, which this app reads from NAVELYRA_DEV_AUTH_SUBJECT, NAVELYRA_DEV_EMAIL and NAVELYRA_DEV_DISPLAY_NAME. Both a subject and an email are required.