PandaAuth docs
From the local quickstart bundle to production self-hosting; the single source of truth for protocol behavior is always your instance’s OIDC discovery document.
Getting started
Reference
- Security factsThe facts on password storage, rate limiting and lockout, token lifetime, and revocation semantics.
- Endpoint referenceThe public OIDC endpoints, scopes, and claims; discovery remains authoritative.
- Management APIThe M2M management plane (M0) — scope contracts, authorization semantics, and rate limits for client CRUD and read-only user queries.