Blog
Notes on what I build: architecture, decisions and what went wrong along the way.
An in-house OpenID Connect provider built on Better Auth, with per-school roles, global logout, outbox-backed webhooks and authorization for AI agents. The decisions, the mistakes and what I'd do again.