Chris
|
418a7b7099
|
Sync site-role assignments to Keycloak group role mappings
|
2026-04-03 02:14:01 +08:00 |
|
Chris
|
d59407d04c
|
feat: allow assigning sites directly from role page
|
2026-04-03 01:56:22 +08:00 |
|
Chris
|
1ff0589b29
|
refactor: simplify schema names and remove provider id columns
|
2026-04-03 01:49:36 +08:00 |
|
Chris
|
21167659f8
|
perf: disable read-time sync and keep provider sync manual
|
2026-04-03 01:23:42 +08:00 |
|
Chris
|
f351fe6454
|
fix: sync role CRUD with provider client roles
|
2026-04-03 01:17:13 +08:00 |
|
Chris
|
ef27162903
|
refactor: rename idp fields to provider naming
|
2026-04-03 01:05:01 +08:00 |
|
Chris
|
467f2b4867
|
refactor(idp-groups): use display name as keycloak group name
|
2026-04-03 00:53:31 +08:00 |
|
Chris
|
7660c662a5
|
feat(sync): keycloak as source-of-truth with auto catalog sync and token refresh
|
2026-04-03 00:46:46 +08:00 |
|
Chris
|
1e1d913103
|
refactor: rebuild backend around role-site authorization model
|
2026-04-02 23:58:13 +08:00 |
|
Chris
|
7cdf2b5a51
|
refactor(keycloak): remove authentik naming and switch to keycloak-only paths
|
2026-04-01 02:01:41 +08:00 |
|
Chris
|
34ba57034d
|
feat(idp): add keycloak-first support with authentik fallback
|
2026-04-01 00:41:38 +08:00 |
|
Chris
|
fe6453f6f8
|
refactor(identity): rename authentik_sub to user_sub and authentik_user_id to idp_user_id
|
2026-03-31 22:32:48 +08:00 |
|
Chris
|
322db6ee1a
|
fix(member): delete authentik user when removing member
|
2026-03-31 21:01:15 +08:00 |
|
Chris
|
f6f86d4bfb
|
feat(admin): add delete APIs and UI actions for all admin resources
|
2026-03-31 20:58:20 +08:00 |
|
Chris
|
1d9bdb7daa
|
feat(admin): add api client management UI and backend CRUD/rotate endpoints
|
2026-03-30 23:28:27 +08:00 |
|
Chris
|
ccb99683b8
|
feat(members): split username/display_name, sync updates to authentik, add password reset API and refresh docs
|
2026-03-30 22:15:41 +08:00 |
|
Chris
|
e1a6bbd844
|
refactor(auth): use group-only admin access and remove admin api-key flow from frontend/admin routes
|
2026-03-30 21:39:43 +08:00 |
|
Chris
|
15eee2fc9a
|
feat(security): enforce admin allowlist guard on admin APIs and attach bearer for admin client
|
2026-03-30 21:25:57 +08:00 |
|
Chris
|
fb515c6c44
|
fix(module-key): make module keys standalone MD format with system_key relation
|
2026-03-30 20:02:17 +08:00 |
|
Chris
|
b4c02835bd
|
feat(keys): auto-generate entity keys and remove manual key input from admin create forms
|
2026-03-30 19:52:00 +08:00 |
|
Chris
|
ea5285501a
|
feat(admin): implement group-centric relations and system/module/company linkage views
|
2026-03-30 19:38:49 +08:00 |
|
Chris
|
f884f1043d
|
feat(flow): unify member-group-permission admin workflow and docs
|
2026-03-30 03:54:22 +08:00 |
|
Chris
|
31fff92e19
|
feat(flow): auto-resolve authentik sub and improve admin dropdown UX
|
2026-03-30 03:33:50 +08:00 |
|
Chris
|
f85d3de5c5
|
feat(admin): add edit flows for all catalogs and member authentik sync
|
2026-03-30 03:25:53 +08:00 |
|
Chris
|
f9ad9417ba
|
refactor: align backend with company-site-member schema and system-level RBAC groups
|
2026-03-30 01:59:50 +08:00 |
|