 marcopan
|
5eed4f9449
|
feat(auth): verify local ThothII users in the backend
|
2026-08-16 19:49:02 +02:00 |
|
|
marcopan
|
f99bddcdf0
|
fix(auth): restore permission boundary safeguards
|
2026-08-16 18:03:36 +02:00 |
|
|
marcopan
|
2e0489ce22
|
feat(auth): centralize ThothII permission enforcement
|
2026-08-16 17:52:03 +02:00 |
|
|
marcopan
|
e54ce15426
|
fix(auth): fail closed configuration compatibility
|
2026-08-16 17:35:40 +02:00 |
|
|
marcopan
|
a66ef58766
|
feat(auth): define strict installation authentication config
|
2026-08-16 17:26:31 +02:00 |
|
 User
|
b454fb478b
|
fix(backend): harden principal child isolation
|
2026-07-16 18:38:40 +02:00 |
|
|
User
|
458eb13c89
|
feat(backend): enforce user-owned sessions
|
2026-07-16 18:32:52 +02:00 |
|
|
marcopan
|
a3a266fd81
|
fix(deploy): close container final review
|
2026-07-12 00:44:39 +02:00 |
|
|
marcopanandClaude Opus 4.8
|
a58fb19340
|
feat(backend): pluggable auth (none/mock/oidc seam)
- authPreHandler(mode) returns Fastify preHandler that sets req.user={id}
- none: uses dev@local
- mock: reads x-mock-user header
- oidc: MVP stub returns 501 + throws
- getUser(req) returns user object
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-27 21:13:26 +02:00 |
|