This is work for a headless authentication service. Built on KeyCloak (a Red Hat open source project) and implemented by Andrew Maier, you can read about the construction of this solution
end to end.
- Going to the demo site
, you'll see how the solution works stand alone
- With authorization, this could be allowed to communicate with any domain / series of sub-domains to securely allow authentication to any service
- the web component powering this is called keycloak-login and the source can be found here
In the future, this may move from "labs" tech to the official solution for authentication.