A portal issues tokens and a policy verifies them before the application receives the request. This article explains the key-store boundary in the released Caddy Security v1.3.0 / go-authcrunch v1.3.8 bundle, reviewed October 5, 2026. For a runnable setup, use your first protected app.

This updated deployment note preserves the original Azure Container Instances (ACI) walkthrough images and replaces its unsafe configuration assumptions. The AuthCrunch reference targets Caddy Security v1.3.0 / go-authcrunch v1.3.8; Azure account, image, networking, TLS and storage still require environment verification. No current ACI deployment was executed for this revision.