Authorization Server Template — Use Cases¶
- SPA + API — authorization code with PKCE; gateway validates access tokens
- Machine-to-machine — client credentials for sync jobs and internal services
- Mobile login — same OIDC flows with PKCE and custom schemes
- SSO-style — shared OP for multiple relying parties (product-dependent)
- Delegated admin — restricted clients for ops tooling
- Federation hooks — external IdP bridging (per product roadmap)