- Create /api/auth/status endpoint for session verification - Create /api/auth/check-group endpoint for group membership validation - These endpoints read Authentik proxy headers to provide auth state - Required for SessionStatusButton and backend group verification