Zitadel
Sign-in with Zitadel
Users sign in through a Zitadel identity provider with OpenID Connect.
hullstock stores no passwords. Signing in sends you to the identity provider, which returns you to the app once you are verified, using the OpenID Connect authorization code flow with PKCE.
The API checks the identity token on every request, then looks up your role in the workshop you are working in.