21 Commits

Author SHA1 Message Date
Chris
405000ded5 feat(role): add role_code across schema and APIs 2026-04-03 15:49:22 +08:00
Chris
55e640f2fb Add in-memory read cache with CUD-based invalidation 2026-04-03 02:32:38 +08:00
Chris
c431fe180b Sync site-role assignments to Keycloak group role mappings 2026-04-03 02:14:01 +08:00
Chris
da08bc01ec feat: allow assigning sites directly from role page 2026-04-03 01:56:22 +08:00
Chris
64246984ba refactor: simplify schema names and remove provider id columns 2026-04-03 01:49:36 +08:00
Chris
388a3f461c refactor: rename idp fields to provider naming 2026-04-03 01:05:01 +08:00
Chris
573a75b9e3 feat(sync): keycloak as source-of-truth with auto catalog sync and token refresh 2026-04-03 00:46:46 +08:00
Chris
0db04f9afc fix(backend): postpone annotations to avoid list() type shadowing crash 2026-04-03 00:22:00 +08:00
Chris
2f92b94f59 refactor: rebuild backend around role-site authorization model 2026-04-02 23:58:13 +08:00
Chris
c7ed517ed2 feat(idp): add keycloak-first support with authentik fallback 2026-04-01 00:41:38 +08:00
Chris
4060ebff70 refactor(identity): rename authentik_sub to user_sub and authentik_user_id to idp_user_id 2026-03-31 22:32:48 +08:00
Chris
75f9f28588 feat(members): split username/display_name, sync updates to authentik, add password reset API and refresh docs 2026-03-30 22:15:41 +08:00
Chris
0cd863f9c2 fix(module-key): make module keys standalone MD format with system_key relation 2026-03-30 20:02:17 +08:00
Chris
61cab48fca feat(admin): implement group-centric relations and system/module/company linkage views 2026-03-30 19:38:49 +08:00
Chris
35ffff1d19 feat(flow): unify member-group-permission admin workflow and docs 2026-03-30 03:54:22 +08:00
Chris
2f97f45795 feat(admin): add edit flows for all catalogs and member authentik sync 2026-03-30 03:25:53 +08:00
Chris
5cc322f783 fix: finalize unified schema and correct permission snapshot mapping 2026-03-30 02:22:27 +08:00
Chris
602c5443ad refactor: align backend with company-site-member schema and system-level RBAC groups 2026-03-30 01:59:50 +08:00
Chris
0f0b197b32 feat: add organization and member management APIs for admin and internal use 2026-03-30 01:23:02 +08:00
Chris
c84d7286a1 feat: add authentik admin user sync endpoint 2026-03-29 23:08:52 +08:00
Chris
3ca207d24a feat: bootstrap backend MVP and architecture docs 2026-03-29 23:01:34 +08:00