# Liferay `/api/spring/portal` wildcard reconciliation
# Date: 2026-11-11

The named `/api/spring/portal` path is not differentiated from arbitrary paths by the Airlock front end and is therefore not retained as a Liferay endpoint.

## Canonical portal hosts

On Infoportal, Maklerportal, SI Portal and Vertriebsservice, GET on each of the following returns the same Apache HTTP 303 application-access handoff while preserving the requested path in `Location`:

- `/api/spring/portal`
- impossible sibling `/api/spring/this-path-must-not-exist-14269251`
- impossible root-level `/this-path-must-not-exist-14269251`

On Zeus Portal, all three names return the same gateway `/error_path/404.html` handoff. The active-versus-Zeus difference is the virtual-host catch-all policy, not evidence for a Spring portal handler.

Previously captured GET and empty-POST observations remain useful examples of those catch-all policies:

- Infoportal: `01a1c7fd-8375-7578-a01f-15a68dcdd979`, `01a1c7fd-8a94-778e-b7dd-be80ef49c0b4`
- Maklerportal: `01a1c7fd-8db6-73b3-b05f-69ae4587f2f9`, `01a1c7fd-9339-703e-95d6-92111df9dc1f`
- SI Portal: `01a1c7fd-9563-7491-8540-274ced6eaf8d`, `01a1c7fd-9752-74d2-8d7a-38abca36300b`
- Vertriebsservice: `01a1c7fd-9ad7-77e4-8723-37b47390c122`, `01a1c7fd-a4f1-7128-8d56-383337bfb29b`
- Zeus Portal: `01a1c7fd-a774-7199-aa7e-ce26698e91f8`, `01a1c7fd-aa60-729f-85c4-bad23d91715a`

## Infoportal alternate listeners

CloudFront-origin-facing ports 6379, 7443, 7980, 8080, 8343, 8443, 9443 and 12345 return the same POST application-access handoff for `/api/spring/portal` and an impossible `/api/spring/*` sibling, canonicalizing both targets to port 443. These observations are also listener-wide wildcard behavior rather than route evidence.

The canonical Liferay and Airlock source-derived inventories remain authoritative.