headquarter/openspec/changes/archive/2026-06-14-completed-specs-archive/auth-oauth/.pi-map.md

openspec/changes/archive/2026-06-14-completed-specs-archive/auth-oauth

dir: openspec/changes/archive/2026-06-14-completed-specs-archive/auth-oauth

index: openspec/changes/archive/2026-06-14-completed-specs-archive/auth-oauth/.pi-map.index.md

role

Defines authentication and authorization requirements for an OAuth2/OIDC-based system using Authentik as the identity provider.

files

• spec.md | Specifies authentication requirements for an OAuth2/OIDC system using Authentik with secure session handling, token refresh, and logout | dep: Authentik OIDC provider, Database (User model), pytest, mypy, ruff

arch

Specification-driven security architecture using standard OAuth2/OIDC flows with session management, token lifecycle handling, and secure logout patterns.

tags

spec, specifies, authentication, requirements, oauth2, oidc, system, authentik

symbols

workflows

dirty