# openspec/changes/archive/2026-05-18-simplify-authentik-auth
dir: openspec/changes/archive/2026-05-18-simplify-authentik-auth

index: openspec/changes/archive/2026-05-18-simplify-authentik-auth/.pi-map.index.md

## role
Archive of a 2026 proposal to simplify authentication by migrating from JWT/OIDC to session-cookie-based OAuth2 with Authentik
## files
- .openspec.yaml | Defines an OpenAPI specification metadata file with schema type and creation date
- design.md | Design document for migrating from JWT-based authentication to simplified session-cookie-based OAuth2 authentication with Authentik | dep: Authentik (OAuth2), Backend session store, Redis (optional), Database (users, user_configs)
- proposal.md | Proposes replacing a complex JWT/OIDC authentication system with a simplified session-based OAuth2 flow using Authentik | dep: Authentik, OAuth2, session cookies, HTTP cookies, JWKS
- tasks.md | Project task list for migrating an application from JWT-based authentication to session-based authentication using Authentik
## arch
Specification-driven change management using OpenAPI metadata with structured design documents (design/proposal/tasks) for architectural decision records
## tags
authentication, authentik, design, jwt, session, oauth2, .openspec, migrating
## symbols
-
## workflows
-
## dirty
-