Identity Platform
A greenfield identity provider: FastAPI + Postgres + Redis power registration/login, HttpOnly session cookies, WebAuthn passkeys, and an Authorization Code + PKCE server. A Vite React dashboard covers account, passkeys, and sessions; hosted OAuth login/consent serves third-party apps; an admin panel manages users, audit logs, and OAuth clients. Fieldkit is a public PKCE client served at /demo/ on the same host. Production runs as one Railway service (nginx + API + static) with managed Postgres/Redis so cookies and OAuth stay same-origin—Compose remains the local runtime; AWS CDK is scaffold-only for a later path.