JeffOps 

Public contracts of JeffOps.Authentication: ICurrentUser, claim names, host ports, HTTP contracts and integration events.

Shared kernel for JeffOps libraries: Result and Error, handler and validator interfaces, decorators, domain events, entity base types.

Domain model of the JeffOps token server: accounts, external logins, personal access tokens, signing keys.

Use cases (vertical slices) of the JeffOps token server: grants, accounts, personal access tokens, sessions, federation.

Authorization model and decision engine: permissions, roles, assignments, scope hierarchy, ABAC policies, ceilings.

Wire contracts of JeffOps authorization: read-API DTOs and integration events shared by the management service and resource services.

Hosted login UI of the JeffOps token server (Razor components, static SSR).

Infrastructure for the JeffOps token server: OpenIddict, EF Core, signing keys, hashing, background services.

Authorization management use cases (vertical slices): roles, assignments, approvals, policies, scopes, governance.

Permission-based authorization for ASP.NET Core resource services: policy provider, handlers, cached resolver.

JWT bearer authentication, current user and service-to-service tokens for resource services using JeffOps.Authentication.

Infrastructure for JeffOps authorization management: EF Core, change interception, sweepers, seeding.

Generic OpenID Connect and OAuth 2.0 identity providers for the JeffOps token server.

Tenancy for the JeffOps token server: tenants, memberships (linked directories, invitations, tenant SSO, SCIM), tenant administrators and platform operators.

Enterprise features for the JeffOps token server: verified tenant domains, per-tenant single sign-on policy, and SCIM provisioning.

Local accounts for the JeffOps token server: passwords, passkeys, TOTP, lockout, reset and verification.

Backend-for-frontend for browser apps: server-side sessions, cookie-to-bearer, CSRF protection.

SQL Server persistence and migrations for JeffOps enterprise features.

Delegated access for the JeffOps token server: impersonation with target approval and break-glass, lockbox tenant access, and tenant switch.

SQL Server persistence and migrations for JeffOps authorization management.