The authorization to native UI is set in cookie. In previous page '/rabbitmq', we have put instance credential in cookie. So following actions should be verified. If user are trying to access /proxy/xxxx/ directly, firstly, it will be redirected to login server to be asked for cf user. then secondly ask for credential for native instance.

The check that if user has access right to this instance is enforced by CC. When cfoundry client query about instance handles, CC list the handles that only accessible to this specific token. If user somehow can get the instance credential that does not belongs to his space, then system are already breached. User can create a app and use that credential to access that instance.

I tend to not to do any CC contact in this handler. Because this handler will be very busy. Every native UI call will go through this handler