OIDC authentication with Identity Server 4 as IAM server (with MongoDB backend) and routed via API Gateway (Ocelot) and consumed by Angular client.