Skip to main content

ADR-0011: Authentication Deliberately Deferred

Date2025-12-15
StatusSuperseded 2026-04-18 — Keycloak OIDC implemented (see backend/app/api/deps/auth.py; realm-per-tenant JWKS-validated JWTs; role hierarchy)
DecidersAdrian Birlogeanu

Context​

PoC needs to demonstrate core compliance workflow without authentication overhead.

Decision​

Defer authentication implementation. Use DEMO_USER constant for all officer operations. get_current_user() returns demo user in PoC mode, Keycloak JWT in production mode.

Rationale​

  • Authentication is orthogonal to compliance workflow PoC
  • Enables rapid development without auth infrastructure
  • get_current_user() abstraction allows transparent migration
  • Pillar 0 design includes full Keycloak + RBAC implementation

Consequences​

  • No multi-user support in PoC
  • No tenant isolation until Pillar 0
  • get_current_user() function signature already supports JWT path