3 Commits

Author	SHA1	Message	Date
Chris	7cdf2b5a51	refactor(keycloak): remove authentik naming and switch to keycloak-only paths	2026-04-01 02:01:41 +08:00
Chris	e1a6bbd844	refactor(auth): use group-only admin access and remove admin api-key flow from frontend/admin routes	2026-03-30 21:39:43 +08:00
Chris	15eee2fc9a	feat(security): enforce admin allowlist guard on admin APIs and attach bearer for admin client	2026-03-30 21:25:57 +08:00