The gateway has a nearly full OAUTH2 impl, only missing refresh tokens at this point. The reverse proxy is respectin auth headers, still needs a bit of work to work as a load balancer, and respect, whitelist, blacklist, and ignore paths