The IdP that talks to your mesh, not a seat counter.

Self-host OpenID Connect on Spring Boot. One jar for login. Lifecycle events leave on Kafka or webhook soyour notification service still owns SMS.

Open the repo Booklet v0.7.0

Login → Spring → mesh

Drag the scene. Black path = authenticate & tokens. Orange = identity events out of AAAX.

Drag to look around · scroll zoom · click a node

Five minutes

local · no account

# JDK 21+
git clone https://github.com/yky32/aaax.git && cd aaax
git checkout v0.7.0
mvn test && mvn spring-boot:run

# demo / demo1234 · http://localhost:8081
./examples/curl/get-token-and-hello.sh

Who it’s for

You already have a mesh

Kafka / notify exists. SMS stays outside the IdP.

You read Spring code

endpoint/ ·usecase/ ·entity/

Lean OIDC is enough

One application.yml; Helm env for prod.

Not chasing Keycloak

No kitchen-sink console. Orgs / SAML IdP later if needed.

Positioning

AAAX authenticates.
Your mesh notifies.

Compose mesh:examples/compose-mesh· deep dive:docs/booklet.md· agents:MCP Auth index