Documentation
¶
Overview ¶
Command identity is the identity service container entry point.
It is a thin shim over the identityserver library: it loads Options from the environment, constructs the server, and serves its HTTP handler plus a Prometheus metrics listener. All wiring — config, persistence, JWT signer, OAuth, IDV, OpenTelemetry, background workers — lives in github.com/elloloop/identity/identityserver so a deployer who embeds identity into an existing Go server runs the exact same code path this binary does.
The identity service hosts authentication and user management RPCs: OAuth, password login, passkeys, TOTP, QR cross-device login, sessions, admin user management, groups, audit logging, and admin help requests.
See docs/embedding.md for the library API and docs/IDENTITY.md for the service charter and decision log.