Concepts

ONQL has no opinion about how you authenticate users — that's your gateway's job. What ONQL provides is what to do once you know who's calling: turn an identity into a ctxkey + ctxvalues pair, and ONQL takes it from there.