# Shared Liferay portal surface behind Airlock Gateway/IAM.
# Host-specific portal entry routes:
GET https://infoportal.baloise.de/group/ao
GET https://infoportal.baloise.de/group/infoportal
GET https://maklerportal.baloise.de/group/mo/
GET https://si-portal.baloise.de/group/si
GET https://vertriebsservice.baloise.de/group/mmag/
GET https://zeus-portal.baloise.de/group/zeus

# Shared Liferay route families (authentication or gateway intercepted):
GET|POST /api/jsonws
POST /api/jsonws/invoke
GET /api/axis/{service}
GET|POST /tunnel-web/secure/axis
GET|POST /c/portal/portlet_url
GET|POST /c/portal/upload
GET /group/control_panel/manage
GET /o/gogo/shell
GET /osgi/system/console
GET /html/js/editor/fckeditor/editor/filemanager/connectors/jsp/connector
GET /o/frontend-js-web/__liferay__/index.js
GET /o/frontend-js-web/liferay/util.js
GET /combo?.../html/js/liferay/liferay.js

# Shared public Airlock IAM surface:
GET /auth/ui/app
POST /auth/rest/public/authentication/default-application/access
POST /auth/rest/public/authentication/applications/{applicationId}/access
DELETE /auth/rest/public/authentication/flow
POST /auth/rest/public/authentication/location/access
POST /auth/rest/public/authentication/location/interpret
GET /auth/rest/public/authentication/ui/configuration/access
GET /auth/rest/public/authentication/ui/default/application/id -> {"applicationId":"default"}
GET /auth/rest/public/maintenance-messages
GET /auth/rest/public/ui/languages
GET /auth/rest/public/ui/static/configuration

# Current configured application selectors observed identically across eight Airlock IAM tenants (401/password-required):
portal_ao
portal_mo
portal_si
sas_va
venta
antragsfreigabe
bsi_crm

# Historical exact selectors now inactive on all eight tenants (404):
portal_bvs
portal_zeus