Current-user identity plus public OpenID configuration and signing-key discovery. Generated from Autodesk's immutable commit-pinned official Authentication OpenAPI schema. This leaf carries 3 of the suite's 105 admitted user-delegated operations. Reads are uncached; sensitive reads are marked sensitive-read and require approval unless session-granted, while ordinary reads remain unheld. Every mutation requires approval. Unsafe JSON integers remain exact strings, documented pagination is followed only through the original route, and no application-only or credential-lifecycle surface is represented as callable.