track /05-keycloak-delegated-auth

Stop Writing Auth: Delegate to Keycloak

Hand identity to an OIDC provider and defend the boundary that is left: validating tokens you did not issue, and surviving a key rotation.

Intermediate ~8h keycloakfastapidocker

Your design doc lives here

Sign in, enroll, and decide the shape before you build it — then find out, in the write-up, how much of it survived contact.