Protected API session
Internal userAuthenticated through the application gateway
Data-protection notice: Address-level data is withheld pending data-protection review. Geography is shown at district level.Internal use only

Information architecture

Site map

Frontend routes mirror the Spring Boot API’s employer, statistics, archive and job-control domains.

Product routes

The same-origin gateway keeps upstream Basic credentials out of the browser.

/dashboardLive summary, breakdowns, trend anomaly and archive health.
/employersURL-backed API filters, pagination and complete-filter CSV export.
/employers/:idDeduplicated employer, aliases and newest-first licence history.
/archiveCoverage gaps, report status, capture action and run history.

Runtime services

Docker Compose provides a production frontend and a contract-matching mock API.

frontend:3000React/Next application and allow-listed API gateway.
mock-api:8080OpenAPI-shaped test data, Basic auth, pagination and job state.
/api/dci/*Server-side proxy; credentials are read from container environment.

Request flow

The summary establishes the latest period and disclosure state before filtered screens load.

Browser requestSame-origin /api/dci route
Gateway allow-listOnly supported read and capture routes
Basic authCredentials added server-side
Safe renderingDistrict-only geography and no public sharing