et-wen.com PASSPORT

Single sign-on (SSO) for internal tools — one passport, every service.
Please sign in to continue, or request an account.

Version	Date	Description
v1.1.1	2026-07-17	One email, one account — applying with an address that already has an account now says so, instead of quietly creating a second identity behind the same address
v1.1.0	2026-07-17	GATE — Root can flag any client to appear as a launch link in the sidebar and on the home page, and reorder them freely Version number now shown next to the sidebar logo
v1.0.0	2026-07-15	Initial release — OpenID Connect identity provider (OpenIddict 7.5): authorization code + PKCE, refresh tokens, discovery / JWKS Single sign-on account for internal tools; per-application roles issued as token claims Admin console: approval queue, one-time set-password links (no email needed), client registration, login audit Two-factor authentication (TOTP) enforced before the admin console can be used Published at https://passport.et-wen.com through the EC2 Caddy gateway

OIDC Discovery: /.well-known/openid-configuration