Watch your own Viron

The page only reads: every request is a GET. Use a read-only token (scope: viron:read, minted with Viron's scripts/mint_read_token.py), so it cannot change anything wherever it ends up. The token stays in this tab's memory: it is not stored, and it is sent only to the Viron above.

That Viron must allow this page's origin, , in VIRON_CORS_ALLOWED_ORIGINS, and be served over https:// (a page on https cannot read plain http).