# 2026-05-17-auth-oauth/specs/auth-oauth
dir: 2026-05-17-auth-oauth/specs/auth-oauth

index: 2026-05-17-auth-oauth/specs/auth-oauth/.pi-map.index.md

## role
Defines authentication and authorization requirements for OAuth2/OIDC integration with Authentik identity provider.
## files
- spec.md | Specifies OAuth2/OIDC authentication, session security, token refresh, and logout requirements for a web application using Authentik as the identity provider. | dep: Authentik, JWKS, OAuth2, OIDC, HTTP cookies, database
## arch
Specification-driven security architecture using standard OAuth2/OIDC flows with session management, token lifecycle, and secure logout patterns.
## tags
oauth2, oidc, authentik, spec, specifies, authentication, session, security
## symbols
-
## workflows
-
## dirty
-