Silence Laboratories / AP3

OAuth full-stack example

A small UI and Django API using Authentik OIDC. Choose Google on the SSO page if it is enabled for your account.

Sign in, then call GET /api/me/.

Authorization Code + PKCE → validated OIDC identity → local Django user → application JWT.

The access token stays in memory. The refresh token stays in an HttpOnly cookie. App logout does not log you out of corporate SSO.