The resource catalog (applications, menus, pages, buttons, APIs), roles and grants

The OAuth 2.1 and OpenID Connect authorization server for applications of the catalog: their clients, the authorizations and tokens it issues, kept as hashes, and its rotating signing keys

Spring Boot application that serves the REST API and the web console