Description
Server for issuing, verifying, and managing API keys.
It follows cloud architecture best practices and focuses on:
- Issuing, verifying, and revoking API keys at scale
- Importing externally-issued API keys for unified verification
- Deriving short-lived JWT and macaroon tokens from long-lived keys
- Side-car deployment for fast API key verification
- Low-latency verification with caching and eventual revocation
- Predictable operations through structured logging, metrics, and tracing.