alex/headquarter
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(project-map): regenerate .pi-map artifacts across the repo

Browse Source
This commit is contained in:
Developer
2026-06-17 11:31:24 +00:00
parent 0dd5f2317b
commit 93da9b42a2
683 changed files with 5075 additions and 4965 deletions
Download Patch File Download Diff File Expand all files Collapse all files
openspec/changes/archive/2026-05-17-auth-oauth/.pi-map.md
+11 -11
View File
@@ -1,20 +1,20 @@
# 2026-05-17-auth-oauth
dir: 2026-05-17-auth-oauth
# openspec/changes/archive/2026-05-17-auth-oauth
dir: openspec/changes/archive/2026-05-17-auth-oauth
index: 2026-05-17-auth-oauth/.pi-map.index.md
index: openspec/changes/archive/2026-05-17-auth-oauth/.pi-map.index.md
## role
Authentication and authorization package implementing OAuth2/OIDC integration with Authentik for secure user session management.
Archive directory containing design documentation and implementation records for an OAuth2/OIDC authentication system with Authentik integration, internal JWTs, and database-backed refresh tokens.
## files
- .openspec.yaml | Defines an OpenAPI specification file metadata with schema type and creation date
- README.md | Documents a project that implements OAuth2/OIDC authentication using Authentik with internal JWTs and database-backed refresh tokens | dep: Authentik, OAuth2, OIDC, JWT
- design.md | Design document specifying an OAuth2/OIDC authentication system using Authentik with internal JWT access tokens, DB-backed opaque refresh tokens, and environment-aware cookie policies. | dep: Authentik, Python async SQLAlchemy, Alembic, JWT library, JWKS client, cookie handling library
- proposal.md | Proposes a technical implementation plan for adding production-ready OAuth2/OIDC authentication with Authentik integration, JWT session management, and secure token lifecycle handling to a backend API project. | dep: Authentik, OAuth2/OIDC, JWKS, JWT, database, apps/api/src, config, models, auth services, API routes
- tasks.md | Task tracking document for implementing OIDC/JWT authentication system with refresh tokens in a backend application. | dep: SQLAlchemy, Alembic, Authentik OIDC, pytest, ruff, mypy, asyncpg, PostgreSQL
- .openspec.yaml | Defines an OpenSpec configuration file with schema type and creation date metadata
- README.md | Implements OAuth2/OIDC authentication using Authentik with internal JWTs and database-backed refresh tokens
- design.md | Design document specifying an Authentik OIDC-based authentication system with internal JWT access tokens, DB-backed opaque refresh tokens, and environment-aware cookie policies for a Python async SQLAlchemy backend. | dep: Authentik OIDC, Python async SQLAlchemy, Alembic, JWKS, JWT, pytest, ruff, mypy
- proposal.md | Proposes a secure OAuth2/OIDC authentication system using Authentik with internal JWT access tokens, server-side refresh token management, and environment-aware cookie policies. | dep: Authentik, JWKS, JWT, database, apps/api/src, config, models, auth services, API routes, frontend
- tasks.md | This is a completed task checklist documenting the implementation of an OIDC/JWT-based authentication system with refresh tokens for a backend application. | dep: Authentik OIDC, SQLAlchemy, Alembic, PostgreSQL/asyncpg, pytest, ruff, mypy, JWKS, JWT
## arch
Layered security architecture with external IdP delegation (Authentik OIDC), internal JWT stateless access tokens, database-backed opaque refresh tokens, and environment-aware cookie security policies.
Specification-driven architecture using OpenSpec schema definitions with phased implementation tracking (design → proposal → tasks → README), documenting an async Python/SQLAlchemy backend with external IdP (Authentik OIDC), internal JWT access tokens, opaque DB refresh tokens, and environment-aware cookie security policies.
## tags
oidc, authentik, oauth2, jwt, authentication, tokens, refresh, design
jwt, tokens, oidc, authentication, authentik, refresh, internal, design
## symbols
-
## workflows