Identity layer

Sign in to SaID

One account for every Sahasta application.

POST /api/oauth/token
  grant_type: authorization_code
  code_verifier: [protected]

→ validate client
→ consume code once
→ issue scoped token