By 3.x branch, everything about administration (survey, users, theming, configs) was inside the /admin path. So that was enough to cloak it under a general plugin's Web Authentication or custom web authentication. I mean, our path /admin is served under authentication.

Since 5.x branch, and into 6.12.x administrative routing path has "spreaded" around, (see comment: https://bugs.limesurvey.org/view.php?id=17798#c68028).

My questions are:

1. is there a config parameter to set as administrative url/path? So that everything authenticated can be configured back into /admin path?
2. inside the source code, is there a better detailed list of administrative routes? What if next version, another administrative feature goes wild changing path?

Actually, even if I ask something outside /admin path, authentication gets triggered, but loop redirect engages. Probably, some part of code is messing up with auth cookie validation.