Soba Auth

Shared first-party identity and Google capability-consent boundary for Soba products. There is no user-facing application here.

Service contract: /.well-known/soba-auth-configuration
Health: /api/health