CIAM Demo
Customer identity, end to end

Feb - Apr 2026 · 48 commits · live demo + published video

spec-first specs and prompt logs kept in the repo's ai-docs.

No agents in this one. Customer identity and access management, built out fully: identity provider, session boundary, resource API, multi-tenant authorization.

Organization-scoped claims flow from Keycloak through a backend-for-frontend into a Spring Boot API that enforces role-based access per tenant. Deployed on an ARM64 VM, demoed on video. 48 commits, Feb to Apr 2026.
id
p-ciam
label
CIAM architecture: Keycloak to Next.js BFF to Spring Boot API

Keycloak

Phase Two · OIDC identity provider

Next.js BFF

Auth.js v5 · session boundary

Spring Boot API

org-scoped claims · RBAC

The deployed demo ↗plain HTTP demo VM · sample logins only The walkthrough video ↗ ciam-demo ↗
Source
/writing-index.json

2026-10-02

AEM Edge Functions on a Laptop: Google Sign-in, Members-Only Pages and API Data at the Edge

Google sign-in, a members-only section and a greeting bar with the user's own data from an API, added to an Edge Delivery site without touching the site code. The six parts of my video, written up with the code at a pinned commit and a token lab that runs the real signature checks in your browser.

2026-04-12

Two AI Skills for Team Enablement: Log the Prompts You Typed, File the AI Docs Behind Them

Keep the prompts people actually typed, turn one-off builds into skills, and file the AI docs behind them under one taxonomy. Two open source skills, a Conversation Logger and an AI Knowledge Harvester, and a sorter to try the filing rules.

All projects