Build a TypeScript authentication and authorization reverse proxy that gates access to internal services behind Google OAuth2 and group-based permissions. This is a ground-up rebuild of an existing system — keep the proven concept but improve on architecture, configurability, observability, and resilience.
A single Express.js gateway that:

