OpenID Connect issuer
Sign in here. Tokens everywhere.
NexAuth is the sign-in desk for your apps. People authenticate here; your services get standard tokens back.
OIDC endpoints
Authorization code flow, consent, and discovery that client apps already know how to call.
Projects
Group people by product. Invite members and assign owner, admin, member, or viewer.
Restricted apps
Keep an OAuth client open to everyone, or allow-list who can reach it.