Carlos Florêncio
39 lines
1.1 KiB
Markdown
39 lines
1.1 KiB
Markdown
---
|
|
status: draft
|
|
system: auth
|
|
specification_version: 1
|
|
migration: in_progress
|
|
owners:
|
|
- kandev
|
|
---
|
|
|
|
# Authorization and identity system
|
|
|
|
## Purpose
|
|
|
|
The authorization and identity system owns authentication state, trust
|
|
boundaries, session credentials, and authorization checks shared by Kandev
|
|
surfaces.
|
|
|
|
## Ownership
|
|
|
|
This system owns authenticated identity, trusted proxy handling, session and
|
|
cookie boundaries, self-action guards, share-link access, and security checks
|
|
for user and service requests.
|
|
|
|
## Exclusions
|
|
|
|
- Provider credentials and external service connections belong to the
|
|
[integration system](../integrations/README.md).
|
|
- Agent permission policy belongs to the [agent system](../agents/README.md).
|
|
|
|
## Migration record
|
|
|
|
Migration remains in progress while legacy source detail is extracted from the
|
|
canonical requirement and system-design documents. Use the catalog command to find them.
|
|
|
|
## Related systems
|
|
|
|
- [Integrations](../integrations/README.md): owns external provider auth.
|
|
- [Platform](../platform/README.md): owns process-level security boundaries.
|