Access token required
You are signed in and past IAP. This guide needs one more thing: the demo access token.
The token is remembered in this browser for 12 hours. A link of the form
/gate.html?token=… opens the guide directly, which is the easy
way to hand it to a room.
What this gate is and isn't. It is a shared secret checked by
the web server — a speed bump that keeps the guide from being readable by
every
@google.com account that stumbles on the URL. It is
not a security boundary: the token lives in the container's
environment, in Terraform state and in your cookie jar, and anyone who has it
can pass it on. IAP is the real access control — this only
narrows who, among those already allowed, actually sees the content.