Commit Graph

16 Commits

Author SHA1 Message Date
Chris
75cf22f7e5 Add production Dockerfile for backend deployment 2026-04-03 03:11:28 +08:00
Chris
a187acf58c Switch access control from groups to realm roles 2026-04-03 03:03:43 +08:00
Chris
6d6f5aa2a6 Remove duplicate internal permissions snapshot API 2026-04-03 02:46:55 +08:00
Chris
2f92b94f59 refactor: rebuild backend around role-site authorization model 2026-04-02 23:58:13 +08:00
Chris
0bc667847d refactor(keycloak): remove authentik naming and switch to keycloak-only paths 2026-04-01 02:01:41 +08:00
Chris
c7ed517ed2 feat(idp): add keycloak-first support with authentik fallback 2026-04-01 00:41:38 +08:00
Chris
4060ebff70 refactor(identity): rename authentik_sub to user_sub and authentik_user_id to idp_user_id 2026-03-31 22:32:48 +08:00
Chris
602c5443ad refactor: align backend with company-site-member schema and system-level RBAC groups 2026-03-30 01:59:50 +08:00
Chris
0f0b197b32 feat: add organization and member management APIs for admin and internal use 2026-03-30 01:23:02 +08:00
Chris
f00b8cefaa fix: enrich me profile via userinfo and add org-member management plan 2026-03-30 01:14:02 +08:00
Chris
8f06f75cca feat: add username-password login flow via authentik token endpoint 2026-03-30 00:52:09 +08:00
Chris
cb8e72ccc7 feat: configure authentik member oidc and local dev token compatibility 2026-03-30 00:34:59 +08:00
Chris
06d78fbec2 chore: add local development env files and startup script 2026-03-29 23:34:34 +08:00
Chris
c84d7286a1 feat: add authentik admin user sync endpoint 2026-03-29 23:08:52 +08:00
Chris
2b81fd01c3 feat: add authentik jwt verification and me endpoints 2026-03-29 23:06:19 +08:00
Chris
3ca207d24a feat: bootstrap backend MVP and architecture docs 2026-03-29 23:01:34 +08:00