track /05-keycloak-delegated-auth

Stop Writing Auth: Delegate to Keycloak

Hand identity to an OIDC provider and defend the boundary that is left: validating tokens you did not issue, and surviving a key rotation.

Intermediate ~8h keycloakfastapidocker

Your evidence lives here

Sign in, enroll, and rehearse the failures on purpose — kill the worker, publish the duplicate, pull the queue out from under it. What you paste here is what says you did.