- kaya backend with OIDC sessions, API tokens, Postgres/Tortoise models - AES-256-GCM private key storage and full certificate/CSR/CRL domain logic - Sycamore/WASM SPA for vaults, keys, requests, certificates, CRLs and templates - imports/exports, XCA .xdb migration, Docker Compose stack and tests
kca-app
The deployable KCA application: environment-driven settings, kaya app assembly (sessions, OIDC, Tortoise, OpenAPI, CORS, optional OpenTelemetry), the HTTP API, Tortoise models, aerich migrations, and the SPA/PWA shell hosting.