Identity & context

Add sign-ups and logins. Secure every request.

Resolves who is calling and which org, project and environment they act in, before any data is touched.

  • Multi-organization identity graph
  • Device-aware sessions
  • JWT issuance and validation
  • Org → Project → Env context
org acme-corpproject storefrontenv productionsessioncontextuserorgprojectenvroles

Axis resolves sessions into a signed ContextManifest — user, org, project, roles — before any engine runs.

Session → Context

Every authenticated request carries a cryptographically signed context.

Multi-tenant graph

Org → Project → Env hierarchy with role bindings on the DAPG.

Console & project auth

Separate flows for operators and end-user product login.

Gateway-only entry

Axis gRPC is called only by Gateway — engines never trust raw tokens.

Each part below is a real component of Axis. Point at one to see what it connects to, or trace a request through it.

SessionContext resolverIdentity graphToken serviceScoped call

One gateway in front of all twelve engines