Protected by Cloudflare Access (login required).
The proxy endpoint calls Pages B using a Cloudflare Access service token.
Pages B has its own Access app — only this service token can reach it.