Authentication Overview
How Fire Arrow Server authenticates requests using JWT tokens or API tokens, resolves identities, and assigns roles.
OAuth / OIDC Providers
Configure OIDC and Azure Identity providers for JWT-based authentication, including claim mapping and identity resolution.
API Tokens
Generate and manage durable and one-time API tokens for programmatic access and anonymous data collection scenarios.
Web UI Sign-In
How users sign in to the Fire Arrow Server web UI through a server-side confidential OAuth client (BFF), and how to configure the required client credentials.
Delegated Access with $drop-privilege
Use the $drop-privilege operation to mint a short-lived token scoped down to a single identity, without ever granting more access than the caller already has.