Login/PoW/POST traffic to the outpost URL space cannot solve a fresh PoW challenge per request; exempt the transport prefix (authentik's own session gate still protects it) so the guarded-host sign-in journey completes.
Login/PoW/POST traffic to the outpost URL space cannot solve a fresh PoW challenge per request; exempt the transport prefix (authentik's own session gate still protects it) so the guarded-host sign-in journey completes.