WorkbenchAPI route readyBFF auth bypass

Browser -> Next.js -> BFF -> API Gateway -> Lambda -> signed S3 image

Load folders, fetch image detail, and render signed S3 assets from the main workbench.

This route is now the viewer entry point for end-to-end testing. When bypass mode is enabled, the BFF skips Auth.js token lookup and calls API Gateway directly. When bypass mode is off, the same workbench continues to run behind Cognito.

Auth route is still availableProtected route

Folder contents

Select a folder

Pick a leaf folder from the registry to browse its imported images.

No folder selected

The viewer is ready. Pick a folder from the left.