JupyterHub OAuth2 Architecture: Requirements, Minimal Design, and Operational Safeguards
Deploying JupyterHub with OAuth2 requires a secure, minimal design that delegates identity verification, enforces TLS, and isolates notebook servers. This guide details requirements, trust boundaries, operational checks, failure modes, and a practical verification checklist.