The firewall is silent, but the connection request has begun. Every packet will pass, or fail, based on trust. That trust is Oauth 2.0.
Oauth 2.0 is the industry standard for secure remote access. It works by delegating authorization through tokens that expire, rotate, and adapt. No passwords