OIDC sign-in for Canonbase
Standards-based auth
Production uses Authorization Code + PKCE against your configured OIDC issuer. The offline demo uses the non-production dev adapter.