# openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth
dir: openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth

index: openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth/.pi-map.index.md

## role
Defines OAuth2/OIDC authentication requirements for integration with Authentik identity provider, covering session lifecycle security.
## files
- spec.md | Defines modified requirements for OAuth2/OIDC authentication, session security, token refresh, and session termination using Authentik | dep: Authentik, OAuth2, OIDC, JWKS
## arch
Specification-driven requirements document using markdown-based RFC-style specification format with no executable code.
## tags
oauth2, oidc, session, authentik, spec, defines, modified, requirements
## symbols
-
## workflows
-
## dirty
-