lilleman 6640dfc84e Generate + mount the JWT signing JWKS (todo §3); ES256 gen-jwks tool, committed dev key, key-rotation docs

2026-06-17 13:24:31 +02:00

..

oidc

Add optional env-activated Kratos OIDC/SSO providers (todo §3); off by default, committed claims mapper, SAML via OIDC bridge note

2026-06-17 10:58:31 +02:00

tokenizer

Generate + mount the JWT signing JWKS (todo §3); ES256 gen-jwks tool, committed dev key, key-rotation docs

2026-06-17 13:24:31 +02:00

identity.schema.json

Add kratos service + migrate (todo §3); pin oryd/kratos:v26.2.0, identity schema (email, name), bootable password config

2026-06-16 23:24:32 +02:00

kratos.yml

Wire Kratos session tokenizer template (todo §3); plainpages JWT (sub/email/roles), 10m TTL, Jsonnet claims mapper reading metadata_admin

2026-06-17 12:02:21 +02:00