Internal tenancy console. Authentication required.
Demo access is available while we migrate: user guest / pass guest.
POST /api/login {"username":"...","password":"..."} -> { token }
GET /api/users/me (Authorization: Bearer <token>)
GET /api/users/{id} (Authorization: Bearer <token>) admin only
🎯 This is an authorized CTF target. Find the flag.