Full Terms document · Home
Before you use the interactive lesson
This is its own page—not an overlay on the lesson. Read the Terms (below or in full), check the box, and accept to go to the tool.
Enforcement is on the server: lesson APIs still require a valid cookie.
You were returned from the lesson without a cookie
The server did not see the whoami_terms cookie when you opened
/tool.html. Often the accept request succeeded in the browser, but the cookie never stuck or never reaches the app through your proxy.
- In DevTools → Network, select POST /api/accept-terms → Headers: confirm the response has a set-cookie line for whoami_terms.
- Ensure your reverse proxy does not strip Set-Cookie from upstream responses.
- Ensure the proxy passes X-Forwarded-Proto: https (or set COOKIE_SECURE=true on the container if TLS terminates at the proxy and cookies still misbehave).