8.4 Who may load the page

The page is the console's code, not its data, and a browser loading a page sends cookies, never the bearer token Shopfront signs callers in with. A posture of RequireRoles(Roles.Staff) would therefore refuse every load, staff included. Shopfront has no cookie sign-in, so the shell is anonymous, AllowAnonymousShell(), and the gate on the data does the work: anyone can load an empty console, and only staff get anything into it. The host logs a warning saying so on every start, which is the point of the option.

A host with a cookie or OpenID Connect sign-in gates the page as well, with RequirePolicy or RequireRoles. Shopfront's deployment comes back to it.

Next: 8.5 Open it