Chris
|
4fd81ffbf2
|
chore(directus): rename *_key to key and skip system key autogen
|
2026-04-04 17:24:54 +08:00 |
|
Chris
|
cf39ea2b0c
|
chore(directus): switch ids to uuid and add key fields only
|
2026-04-04 16:59:38 +08:00 |
|
Chris
|
560f40ae8a
|
chore(directus): convert ids to uuid and ensure *_key fields
|
2026-04-04 16:55:09 +08:00 |
|
Chris
|
838c0afc0b
|
chore(directus): add users.user_key to base directus schema
|
2026-04-04 16:51:23 +08:00 |
|
Chris
|
0666b8683e
|
chore(directus): add import schemas and key auto-generation sql
|
2026-04-04 16:48:04 +08:00 |
|
Chris
|
cd7feec38a
|
docs: update env workflow and role_code contracts
|
2026-04-03 15:50:19 +08:00 |
|
Chris
|
649af715e2
|
docs: add workspace guardrails and submodule workflow
|
2026-04-03 14:51:14 +08:00 |
|
Chris
|
3571cdf2ee
|
docs(env): standardize development and production env workflow
|
2026-04-03 14:43:40 +08:00 |
|
Chris
|
e8058d1240
|
Use single backend env template in deploy docs
|
2026-04-03 04:33:47 +08:00 |
|
Chris
|
6dabc2eab6
|
Document single backend .env workflow
|
2026-04-03 04:31:59 +08:00 |
|
Chris
|
8609d61f82
|
Use example compose and ignore local deploy env files
|
2026-04-03 04:26:05 +08:00 |
|
Chris
|
f01a228026
|
Add docker-compose template for VPS deployment
|
2026-04-03 04:18:46 +08:00 |
|
Chris
|
fdf17ecf85
|
Update docs and submodule after backend cleanup
|
2026-04-03 03:55:04 +08:00 |
|
Chris
|
a45aa5a6c7
|
Add VPS deployment runbook
|
2026-04-03 03:40:10 +08:00 |
|
Chris
|
c394e9153e
|
Rename integration workspace to member-platform
|
2026-04-03 03:32:22 +08:00 |
|
Chris
|
1d2a57fada
|
Split frontend and backend into separate submodule repos
|
2026-04-03 03:19:48 +08:00 |
|
Chris
|
40d9fb8dcf
|
Add production Dockerfile for backend deployment
|
2026-04-03 03:11:28 +08:00 |
|
Chris
|
fc81696abf
|
Switch access control from groups to realm roles
|
2026-04-03 03:03:43 +08:00 |
|
Chris
|
daa21e81a9
|
Remove duplicate internal permissions snapshot API
|
2026-04-03 02:46:55 +08:00 |
|
Chris
|
955019e8d7
|
Add Redis-backed cache backend with env switch
|
2026-04-03 02:38:54 +08:00 |
|
Chris
|
ed413ce39d
|
Add in-memory read cache with CUD-based invalidation
|
2026-04-03 02:32:38 +08:00 |
|
Chris
|
418a7b7099
|
Sync site-role assignments to Keycloak group role mappings
|
2026-04-03 02:14:01 +08:00 |
|
Chris
|
d59407d04c
|
feat: allow assigning sites directly from role page
|
2026-04-03 01:56:22 +08:00 |
|
Chris
|
1ff0589b29
|
refactor: simplify schema names and remove provider id columns
|
2026-04-03 01:49:36 +08:00 |
|
Chris
|
21167659f8
|
perf: disable read-time sync and keep provider sync manual
|
2026-04-03 01:23:42 +08:00 |
|
Chris
|
f351fe6454
|
fix: sync role CRUD with provider client roles
|
2026-04-03 01:17:13 +08:00 |
|
Chris
|
6adca8c229
|
fix: add provider column migration script for existing db
|
2026-04-03 01:10:13 +08:00 |
|
Chris
|
ef27162903
|
refactor: rename idp fields to provider naming
|
2026-04-03 01:05:01 +08:00 |
|
Chris
|
7660c662a5
|
feat(sync): keycloak as source-of-truth with auto catalog sync and token refresh
|
2026-04-03 00:46:46 +08:00 |
|
Chris
|
5837582c0f
|
feat(frontend): migrate admin UI to role-site model and clean legacy pages
|
2026-04-03 00:18:39 +08:00 |
|
Chris
|
1e1d913103
|
refactor: rebuild backend around role-site authorization model
|
2026-04-02 23:58:13 +08:00 |
|
Chris
|
e2dd3ce106
|
docs: add clickable links for file paths in markdown
|
2026-04-02 23:38:17 +08:00 |
|
Chris
|
16bbfdba24
|
docs: rebuild architecture and taskplans for role-site model
|
2026-04-02 23:35:05 +08:00 |
|
Chris
|
7cdf2b5a51
|
refactor(keycloak): remove authentik naming and switch to keycloak-only paths
|
2026-04-01 02:01:41 +08:00 |
|
Chris
|
34ba57034d
|
feat(idp): add keycloak-first support with authentik fallback
|
2026-04-01 00:41:38 +08:00 |
|
Chris
|
fe6453f6f8
|
refactor(identity): rename authentik_sub to user_sub and authentik_user_id to idp_user_id
|
2026-03-31 22:32:48 +08:00 |
|
Chris
|
316d17027b
|
docs(api): add internal API contract and expose response schemas in swagger
|
2026-03-31 22:20:24 +08:00 |
|
Chris
|
ccb99683b8
|
feat(members): split username/display_name, sync updates to authentik, add password reset API and refresh docs
|
2026-03-30 22:15:41 +08:00 |
|
Chris
|
37a69081e3
|
docs: rebuild documentation set for new architecture and add DB schema guide
|
2026-03-30 19:21:54 +08:00 |
|
Chris
|
f884f1043d
|
feat(flow): unify member-group-permission admin workflow and docs
|
2026-03-30 03:54:22 +08:00 |
|
Chris
|
23baceed71
|
docs: Update TASKPLAN_FRONTEND and FRONTEND_HANDOFF_SCHEMA_V2 - mark Schema v2 as complete
|
2026-03-30 02:39:58 +08:00 |
|
Chris
|
d79ed7c6fc
|
fix: finalize unified schema and correct permission snapshot mapping
|
2026-03-30 02:22:27 +08:00 |
|
Chris
|
42f9124f77
|
chore: consolidate full database schema into single init_schema.sql
|
2026-03-30 02:14:26 +08:00 |
|
Chris
|
f9ad9417ba
|
refactor: align backend with company-site-member schema and system-level RBAC groups
|
2026-03-30 01:59:50 +08:00 |
|
Chris
|
f5848a360f
|
feat: add organization and member management APIs for admin and internal use
|
2026-03-30 01:23:02 +08:00 |
|
Chris
|
c6cb9d6818
|
fix: enrich me profile via userinfo and add org-member management plan
|
2026-03-30 01:14:02 +08:00 |
|
Chris
|
ad6d16c97e
|
feat: add username-password login flow via authentik token endpoint
|
2026-03-30 00:52:09 +08:00 |
|
Chris
|
5170787d43
|
docs: add database schema snapshot and validation index links
|
2026-03-30 00:42:48 +08:00 |
|
Chris
|
ddaaadfe5b
|
feat: configure authentik member oidc and local dev token compatibility
|
2026-03-30 00:34:59 +08:00 |
|
Chris
|
0e9ce1cd32
|
chore: add local development env files and startup script
|
2026-03-29 23:34:34 +08:00 |
|