Mindenit ID
Owner — user-facing surface
Centralised OIDC authentication giving one account across all Mindenit products — internal apps and external applications.
Self-hosted identity provider on Keycloak core: one account across every Mindenit product — Schedule, the Business CRM in closed beta, and anything that follows — with the same authentication opened to third-party developers.
I own the entire user-facing surface: registration and login, per-service branding and terms of service, session and account management, ban and force-logout, an internal admin panel, and the developer console where third parties register and manage their own applications. Social login through Google, Telegram, Discord and Apple, plus 2FA. Vue 3 with Nuxt, Pinia for state, TanStack Query and TanStack Table for data.
A first attempt in 2024, written from scratch, did not survive contact with the specification. The restart on Keycloak core is the version that works: the value is in what sits on top of a correct OIDC implementation, not in writing another one.
Intended to consolidate the separate Logto and Zitadel deployments across the other products onto a single provider, with a free tier for university students shipping their own applications. Will be released as FOSS.
Related: the auth layer for the Business CRM — a deny-by-default JWT guard validated against a self-hosted Zitadel OIDC provider, with a Nuxt BFF keeping access and refresh tokens in encrypted httpOnly cookies (never exposed to client-side JavaScript).