Roadmap
Current development status and future features for the Auth Service.
Feature Status
The Auth Service provides the foundational authentication and identity integration for the Arya Banking platform.
Implemented Features
- Keycloak Admin SDK integration for user management.
- Secure
client_credentialsdelegation for inter-service communication. - Pooled
RestTemplatefor high-performance authentication. - Cross-service account locking orchestration.
- Centralized identity registration bridge.
Technical Debt and Roadmap
The following enhancements are prioritized for upcoming development cycles:
| Feature | Description | Priority |
|---|---|---|
| OAuth2 Code Grant | Transition from password grant to Authorization Code + PKCE for browser-based logins. | High |
| Multi-Factor Auth | Integration of OTP verification during the authentication flow. | High |
| Token Introspection | Implementing a localized token introspection cache for better performance. | Medium |
| Audit Integration | Publishing authentication success/failure events to the platform's audit trail. | Medium |