Extensible OAuth proxy with config-driven IdPs, token injection, and Casbin RBAC enforcement.
Proxied resources are available at /api/proxy/[resource]/…
/api/proxy/[resource]/…