admin/

Package apiaccess manages machine authorization: API definitions with scopes and client grants.

Package apikey issues machine credentials sent via the X-API-KEY header, with expiry and last-used tracking.

Package appconfig serves public and admin configuration endpoints.

Package auditlog captures domain events and exposes them via HTTP.

Package customclaim manages per-user and per-group key/value claims injected into OIDC tokens.