Recipes

Task-shaped walkthroughs, each verified against a live pool:

• Hosted login for an SPA — the authorization-code + PKCE flow with the hosted page: redirect out, exchange the code, brand the screens.
• Verify tokens in your backend — trust a pool with ~10 lines: JWKS, EdDSA, iss + aud, roles and permissions.
• Own your user store — move a pool’s users into your K3 bucket, live, and query them over the pg wire.

For the raw surfaces these recipes compose, see the Issuer API and the CLI Guide.