{
  "id": "stack-profile:auth-identity-platform",
  "_kind": "StackProfile",
  "_file": "domain/stack-profiles/deep-stacks-3.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Auth & Identity Platform Stack (Node.js, Keycloak, PostgreSQL, Redis, OAuth2, Docker)",
    "description": "A centralized authentication and identity platform using Keycloak as\nthe identity provider with support for OIDC, SAML, and social login\nfederation. Node.js with Express or Fastify serves as a lightweight\ngateway that handles session management, token refresh, and\napplication-specific authorization logic. PostgreSQL stores user\nprofiles, tenant configurations, and audit logs. Redis caches active\nsessions and revocation lists for sub-millisecond token validation.\nPassport.js provides strategy-based authentication middleware for\ncustom flows. Docker Compose orchestrates Keycloak, the gateway, and\nbacking services for local development. This stack is designed for\norganizations that need SSO across multiple applications, fine-grained\nRBAC, and compliance with standards like SOC 2 and GDPR. The tradeoff\nis Keycloak's operational complexity — theming, realm configuration,\nand upgrade migrations require dedicated expertise.\n",
    "composes": [
      "language:typescript",
      "tool:keycloak",
      "library:passport",
      "library:ioredis",
      "library:prisma",
      "tool:docker",
      "library:express"
    ]
  },
  "outgoingEdges": [
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "language:typescript",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "tool:keycloak",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "library:passport",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "library:ioredis",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "library:prisma",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "tool:docker",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "library:express",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "tool:docker-compose",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "role:backend-engineer",
      "kind": "used_by_role"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "role:security-engineer",
      "kind": "used_by_role"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "role:platform-engineer",
      "kind": "used_by_role"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "workflow:access-review",
      "kind": "follows_workflow"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "workflow:security-audit",
      "kind": "follows_workflow"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "domain:security",
      "kind": "applies_to"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "domain:software-engineering",
      "kind": "applies_to"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "skill-area:authentication",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "skill-area:oauth-flows",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "skill-area:identity-security",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "skill-area:backend-security",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:auth-identity-platform",
      "to": "skill-area:containerization",
      "kind": "requires_skill_area"
    }
  ],
  "incomingEdges": []
}