{"service":"zarela-auth","role":"Service #10 — Auth / Identity","version":"0.1.0","description":"Identity foundation: wraps Keycloak (authN + staff RBAC + tenants) and OpenFGA (relationship authz), owns the Auth profile DB, and is the glue every Zarela service trusts for who someone is.","authorities":{"authn":"Keycloak","authz":"OpenFGA","consent":"Consent service (svc-08, orthogonal gate)"},"realm":"zarela","issuer":"https://auth.nbic.dev/idp/realms/zarela","endpoints":{"landing":"/","info":"/info","docs":"/docs","openapi":"/docs-json","health_live":"/health/live","health_ready":"/health/ready","metrics":"/metrics","jwks":"/.well-known/jwks.json","oidc_discovery":"/.well-known/openid-configuration","authz_check":"POST /authz/check","admin_rbac":"/admin/*","identity":"/identity/*","sync":"/sync/*"},"ts":"2026-06-21T12:01:48.722Z"}