Authorization Server Template — Runbook¶
- Certificate renewal — rotate signing certs before expiry; validate JWKS propagation
- Migrations — OpenIddict schema updates
- Monitoring — token endpoint latency, error rates, invalid_client spikes
- Health probes — liveness/readiness consistent with other web hosts