<?xml version="1.0" encoding="UTF-8"?>
<!--
  Deliberately ONE url, and that needs explaining.

  This SPA is not prerendered and sets no per-route metadata, so every path
  serves the same index.html: the same <title>, the same description, and
  `<link rel="canonical" href="https://auth.u2secured.com/">`. Every route
  therefore tells a crawler "I am the homepage". Listing /developer, /privacy,
  /terms or the sixteen /developer/docs/* pages here would contradict their own
  canonical tag — asking Google to index pages that disclaim themselves.

  Until the portal emits per-route title/description/canonical (see
  apps/home for the vite-react-ssg setup that does this), the root is the only
  URL that can honestly be submitted.

  The file exists even so, because without it `/sitemap.xml` fell through to the
  SPA fallback and answered 200 with HTML — worse than a 404, since Search
  Console accepts the submission and then reports a parse error.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://auth.u2secured.com/</loc>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
</urlset>
