From ff13c82a1276a7f848a589b99fae364bd67e9219 Mon Sep 17 00:00:00 2001
From: Codex <codex@local>
Date: Sun, 23 Aug 2026 00:26:28 +0900
Subject: [PATCH] docs: record HOBBY DNA admin OIDC provider and participant
 auth split

PK 19 (hobbydna-oidc) is admin-only; participants use direct Google/
Kakao/Naver OAuth, no Authentik broker. Notes the now-deleted PK 20
(hobbydna-user-oidc) that was briefly used for the broker approach.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RbVxsidKDGXubonbsy4yZ7
---
 docs/sso.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docs/sso.md b/docs/sso.md
index 5897b36..69c3bfc 100644
--- a/docs/sso.md
+++ b/docs/sso.md
@@ -15,8 +15,12 @@
 | 7 | `filebrowser-proxy` | Proxy | FileBrowser |
 | 8 | `comfyui-proxy` | Proxy | ComfyUI |
 | 9 | `wikijs-provider` | OAuth2/OIDC | Wiki.js |
+| 11 | `reservation-oidc` | OAuth2/OIDC | Reservation App |
+| 19 | `hobbydna-oidc` | OAuth2/OIDC | HOBBY DNA 관리자 페이지 |
 | — | `reminder` | OAuth2/OIDC | Telegram Reminder Bot 관리자 UI |
 
+HOBBY DNA는 **관리자만** Authentik(PK 19)을 쓴다. 참여자(일반 사용자) 로그인은 Authentik을 거치지 않고 구글/카카오/네이버와 앱이 직접 OAuth로 통신한다 — 자세한 내용은 `/root/hobbydna-app/docs/podman-service-hobbydna.md` 7-1절 참고. (한때 `hobbydna-user-oidc`, PK 20으로 Authentik 브로커 방식을 썼으나 이 구조로 바뀌면서 삭제됨.)
+
 ## OIDC 연동 상세
 
 ### Grafana (`grafana.ini`)