 User
|
abd68470da
|
fix(auth): expose trusted upstream mode
|
2026-08-22 16:29:30 +02:00 |
|
|
User
|
cc72e65f9d
|
fix(workspaces): align postgres connection diagnostics
|
2026-08-22 13:49:21 +02:00 |
|
|
User
|
1e2c4e65c5
|
fix(auth): close CURRENT publication race
|
2026-08-21 22:51:38 +02:00 |
|
|
User
|
da2f4a6681
|
fix(auth): harden runtime projection validation
|
2026-08-21 22:46:42 +02:00 |
|
|
User
|
05f8615887
|
feat(auth): load immutable runtime projection snapshots
|
2026-08-21 22:31:38 +02:00 |
|
 marcopan
|
d43738eeae
|
fix(auth): require local registry ownership
|
2026-08-18 10:31:44 +02:00 |
|
|
marcopan
|
e8b9995ed0
|
feat(auth): integrate authentication with installation lifecycle
|
2026-08-17 23:33:51 +02:00 |
|
|
marcopan
|
7e52df2702
|
fix(auth): address Task 13 deployment review findings
|
2026-08-17 21:31:25 +02:00 |
|
|
marcopan
|
ef244ab56d
|
fix(auth): harden unified diagnostic execution
|
2026-08-17 17:25:26 +02:00 |
|
|
marcopan
|
30ee9433dc
|
fix(auth): harden unified diagnostic execution
|
2026-08-17 16:39:54 +02:00 |
|
|
marcopan
|
3ed00ff086
|
feat(auth): include authentication in workspace and tht diagnostics
|
2026-08-17 15:51:16 +02:00 |
|
|
marcopan
|
cb0e873ed7
|
fix(auth): pin native auth storage operations
|
2026-08-17 14:52:21 +02:00 |
|
|
marcopan
|
6d438f4c7e
|
fix(auth): close diagnostic filesystem races
|
2026-08-17 13:04:15 +02:00 |
|
|
marcopan
|
be1724890a
|
fix(auth): make diagnostics bounded and portable
|
2026-08-17 12:19:19 +02:00 |
|
|
marcopan
|
7cfbee36fa
|
fix(auth): make diagnostics match runtime safety
|
2026-08-17 11:23:52 +02:00 |
|
|
marcopan
|
f0ae680671
|
feat(auth): validate mapped groups through Authentik
|
2026-08-17 10:44:56 +02:00 |
|
|
marcopan
|
33ae7cfdc2
|
fix(auth): bound all OIDC provider exchanges
|
2026-08-17 10:03:07 +02:00 |
|
|
marcopan
|
c86f01e886
|
fix(auth): paginate session maintenance safely
|
2026-08-17 09:05:20 +02:00 |
|
|
marcopan
|
3e7bb11313
|
fix(auth): isolate bounded OIDC cleanup
|
2026-08-17 07:46:43 +02:00 |
|
|
marcopan
|
bdabecbb63
|
fix(auth): bound OIDC initiation and transport
|
2026-08-17 07:03:19 +02:00 |
|
|
marcopan
|
8573500121
|
fix(auth): harden OIDC browser transactions
|
2026-08-17 06:18:49 +02:00 |
|
|
marcopan
|
4fe51cbeb1
|
feat(auth): add generic OIDC login with mandatory groups
|
2026-08-17 05:44:10 +02:00 |
|
|
marcopan
|
8c67cb75dc
|
fix(auth): honor HTTPS sessions in Pi management
|
2026-08-17 01:46:34 +02:00 |
|
|
marcopan
|
09e546c1ef
|
fix(auth): bind request auth snapshots
|
2026-08-17 01:11:25 +02:00 |
|
|
marcopan
|
94c2cd3709
|
fix(auth): bind current local registry and CORS
|
2026-08-17 00:34:58 +02:00 |
|
|
marcopan
|
c34e01e9b9
|
fix(auth): harden async login boundaries
|
2026-08-17 00:00:34 +02:00 |
|
|
marcopan
|
29bfb41363
|
feat(auth): add local login and CSRF-protected sessions
|
2026-08-16 23:23:55 +02:00 |
|
|
marcopan
|
8477a69a29
|
fix(auth): tighten bridge claim protocol
|
2026-08-16 22:44:44 +02:00 |
|
|
marcopan
|
7d9ca13f1d
|
fix(auth): harden Windows storage bridge
|
2026-08-16 22:16:13 +02:00 |
|
|
marcopan
|
c9b02fc57e
|
fix(auth): add Windows session storage bridge
|
2026-08-16 21:43:03 +02:00 |
|
|
marcopan
|
6bf8218fea
|
fix(auth): harden persistent sessions
|
2026-08-16 21:03:07 +02:00 |
|
|
marcopan
|
ab61c1ad6d
|
feat(auth): persist opaque remembered sessions
|
2026-08-16 20:28:32 +02:00 |
|
|
marcopan
|
b80a2cc1e9
|
fix(auth): protect local registry directory
|
2026-08-16 20:11:30 +02:00 |
|
|
marcopan
|
de8844a4ac
|
fix(auth): bound local password encoding
|
2026-08-16 20:03:40 +02:00 |
|
|
marcopan
|
1ed1a34ae2
|
fix(auth): reject ill-formed local passwords
|
2026-08-16 19:56:43 +02:00 |
|
|
marcopan
|
5eed4f9449
|
feat(auth): verify local ThothII users in the backend
|
2026-08-16 19:49:02 +02:00 |
|
|
marcopan
|
f99bddcdf0
|
fix(auth): restore permission boundary safeguards
|
2026-08-16 18:03:36 +02:00 |
|
|
marcopan
|
2e0489ce22
|
feat(auth): centralize ThothII permission enforcement
|
2026-08-16 17:52:03 +02:00 |
|
|
marcopan
|
e54ce15426
|
fix(auth): fail closed configuration compatibility
|
2026-08-16 17:35:40 +02:00 |
|
|
marcopan
|
a66ef58766
|
feat(auth): define strict installation authentication config
|
2026-08-16 17:26:31 +02:00 |
|
|
User
|
b454fb478b
|
fix(backend): harden principal child isolation
|
2026-07-16 18:38:40 +02:00 |
|
|
User
|
458eb13c89
|
feat(backend): enforce user-owned sessions
|
2026-07-16 18:32:52 +02:00 |
|
|
marcopan
|
a3a266fd81
|
fix(deploy): close container final review
|
2026-07-12 00:44:39 +02:00 |
|
|
marcopanandClaude Opus 4.8
|
a58fb19340
|
feat(backend): pluggable auth (none/mock/oidc seam)
- authPreHandler(mode) returns Fastify preHandler that sets req.user={id}
- none: uses dev@local
- mock: reads x-mock-user header
- oidc: MVP stub returns 501 + throws
- getUser(req) returns user object
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-27 21:13:26 +02:00 |
|