HotDoc OpenID Connect
HotDoc's OpenID Connect / OAuth 2.0 authorization server (Rails/Doorkeeper) for clinic and partner sign-in. Discovery metadata (OIDC + RFC 8414) and a live RS256 JWKS are served publicly; authorization_code and implicit flows are supported with the openid scope and identity claims carrying practice/PMS context. Client registration is partner/clinic-gated.