demo-soft

Reference integration with Platform Hub. Authenticate once via Hub — no local credentials.

Sign in with Hub →
What happens:
  1. Redirect to Hub /oauth/authorize with PKCE + nonce
  2. Hub authenticates you, calls back with code
  3. Soft exchanges code → verifies id_token via JWKS → sets session cookie
  4. You land on /home with your Hub scope already fetched