One Zitadel, Many Apps, and a Hop Out to Keycloak
What I learned wiring several apps to one Zitadel and brokering out to a customer's Keycloak: two very different APIs, a PKCE toggle that does nothing, and a logout that cannot federate.
The cron job that had no user
A scheduled job in a multi-tenant NestJS backend kept failing at 2 AM with 'Missing active user in context'. Nobody was logged in, because nobody logs in a cron. Here is the CLS trap and the fix.