Rack middleware that enforces audience checks with deployable profiles, layering on top of Verikloak token verification.

Framework-agnostic Rack middleware that normalizes forwarded tokens, enforces trust boundaries, and checks header/claims consistency before verikloak.

Maps Keycloak JWT roles to a Pundit-friendly UserContext with helpers and a Rails generator.

Rails integration for Verikloak: auto middleware, helpers, and standardized JSON errors.