Identity API: This API is powered by Duende IdentityServer 7. Use POST /connect/token for programmatic token acquisition. Human login flows use PKCE via the browser.