3 Commits

Author	SHA1	Message	Date
Chris	0bc667847d	refactor(keycloak): remove authentik naming and switch to keycloak-only paths	2026-04-01 02:01:41 +08:00
Chris	8ed50cdcc6	refactor(auth): use group-only admin access and remove admin api-key flow from frontend/admin routes	2026-03-30 21:39:43 +08:00
Chris	0e17997e66	feat(security): enforce admin allowlist guard on admin APIs and attach bearer for admin client	2026-03-30 21:25:57 +08:00