Cloudflare Demo Shop
Cloudflare Access

This page and its API are covered by an Access self-hosted application (remydemo.com/email-security/send*). You already had to sign in to load this page — that's Access, not this site, requiring it. This is what keeps the send demo from being spammed: only an authenticated identity can trigger it, and the API independently verifies that on every request.

Send a demo email

Signed in as . Sender and message content are fixed server-side — enter any recipient you'd like to send the demo message to.

Checking your Access session…

What just happened

  1. Cloudflare Access checked your session before this page — and every call to /email-security/send/api — was allowed to reach Cloudflare Pages.
  2. The Function verified the signed Cf-Access-Jwt-Assertion token itself (signature, issuer, audience, expiry) rather than trusting Access blindly, since Access applications are scoped by hostname and this project is also reachable on its *.pages.dev fallback domain.
  3. Only after that verification did the server call the Email Sending API with a fixed subject/body and from: support@remydemo.com.
  4. If you reply, your reply arrives at support@remydemo.com, where an existing Email Routing rule forwards it on — see the Email overview for that half of the story.
← Back to Email