Chris
|
2004203758
|
chore: silence introspection fallback warning noise
|
2026-04-03 01:53:35 +08:00 |
|
Chris
|
ef27162903
|
refactor: rename idp fields to provider naming
|
2026-04-03 01:05:01 +08:00 |
|
Chris
|
7986160d9e
|
fix(auth): resolve admin groups via keycloak admin API when token lacks groups
|
2026-04-03 00:28:32 +08:00 |
|
Chris
|
6ae907d649
|
fix(auth): accept keycloak group path variants for admin guard
|
2026-04-03 00:24:32 +08:00 |
|
Chris
|
7cdf2b5a51
|
refactor(keycloak): remove authentik naming and switch to keycloak-only paths
|
2026-04-01 02:01:41 +08:00 |
|
Chris
|
34ba57034d
|
feat(idp): add keycloak-first support with authentik fallback
|
2026-04-01 00:41:38 +08:00 |
|
Chris
|
c4492a3072
|
fix(api-clients): fallback api-key hashing without argon2; show site/module parent display names
|
2026-03-31 20:35:04 +08:00 |
|
Chris
|
1d9bdb7daa
|
feat(admin): add api client management UI and backend CRUD/rotate endpoints
|
2026-03-30 23:28:27 +08:00 |
|
Chris
|
e1a6bbd844
|
refactor(auth): use group-only admin access and remove admin api-key flow from frontend/admin routes
|
2026-03-30 21:39:43 +08:00 |
|
Chris
|
15eee2fc9a
|
feat(security): enforce admin allowlist guard on admin APIs and attach bearer for admin client
|
2026-03-30 21:25:57 +08:00 |
|
Chris
|
2dd70dceff
|
fix(auth): correct userinfo endpoint fallback for authentik profile enrichment
|
2026-03-30 03:13:29 +08:00 |
|
Chris
|
c6cb9d6818
|
fix: enrich me profile via userinfo and add org-member management plan
|
2026-03-30 01:14:02 +08:00 |
|
Chris
|
ddaaadfe5b
|
feat: configure authentik member oidc and local dev token compatibility
|
2026-03-30 00:34:59 +08:00 |
|
Chris
|
5790878c87
|
feat: add authentik jwt verification and me endpoints
|
2026-03-29 23:06:19 +08:00 |
|
Chris
|
e9717d5214
|
feat: bootstrap backend MVP and architecture docs
|
2026-03-29 23:01:34 +08:00 |
|