Commit Graph
237 Commits
Author SHA1 Message Date
User da2f4a6681 fix(auth): harden runtime projection validation 2026-08-21 22:46:42 +02:00
User 05f8615887 feat(auth): load immutable runtime projection snapshots 2026-08-21 22:31:38 +02:00
marcopan d43738eeae fix(auth): require local registry ownership 2026-08-18 10:31:44 +02:00
marcopan 2b618c5a0f test(auth): harden Task 15 OIDC smoke evidence 2026-08-18 06:33:48 +02:00
marcopan 8a3fa5031d test(auth): gate local and OIDC authentication release 2026-08-18 06:02:25 +02:00
marcopan dee17893b4 fix(auth): harden restore verification transaction 2026-08-18 00:58:12 +02:00
marcopan 0651f3316f fix(auth): validate stopped workspace restore 2026-08-18 00:06:28 +02:00
marcopan e8b9995ed0 feat(auth): integrate authentication with installation lifecycle 2026-08-17 23:33:51 +02:00
marcopan 0d0c15b4b8 fix(auth): complete Task 13 deployment review 2026-08-17 22:15:41 +02:00
marcopan 7e52df2702 fix(auth): address Task 13 deployment review findings 2026-08-17 21:31:25 +02:00
marcopan ef244ab56d fix(auth): harden unified diagnostic execution 2026-08-17 17:25:26 +02:00
marcopan 30ee9433dc fix(auth): harden unified diagnostic execution 2026-08-17 16:39:54 +02:00
marcopan 3ed00ff086 feat(auth): include authentication in workspace and tht diagnostics 2026-08-17 15:51:16 +02:00
marcopan cb0e873ed7 fix(auth): pin native auth storage operations 2026-08-17 14:52:21 +02:00
marcopan 6d438f4c7e fix(auth): close diagnostic filesystem races 2026-08-17 13:04:15 +02:00
marcopan be1724890a fix(auth): make diagnostics bounded and portable 2026-08-17 12:19:19 +02:00
marcopan 7cfbee36fa fix(auth): make diagnostics match runtime safety 2026-08-17 11:23:52 +02:00
marcopan f0ae680671 feat(auth): validate mapped groups through Authentik 2026-08-17 10:44:56 +02:00
marcopan 33ae7cfdc2 fix(auth): bound all OIDC provider exchanges 2026-08-17 10:03:07 +02:00
marcopan c86f01e886 fix(auth): paginate session maintenance safely 2026-08-17 09:05:20 +02:00
marcopan 3e7bb11313 fix(auth): isolate bounded OIDC cleanup 2026-08-17 07:46:43 +02:00
marcopan bdabecbb63 fix(auth): bound OIDC initiation and transport 2026-08-17 07:03:19 +02:00
marcopan 8573500121 fix(auth): harden OIDC browser transactions 2026-08-17 06:18:49 +02:00
marcopan 4fe51cbeb1 feat(auth): add generic OIDC login with mandatory groups 2026-08-17 05:44:10 +02:00
marcopan 8c67cb75dc fix(auth): honor HTTPS sessions in Pi management 2026-08-17 01:46:34 +02:00
marcopan 09e546c1ef fix(auth): bind request auth snapshots 2026-08-17 01:11:25 +02:00
marcopan 94c2cd3709 fix(auth): bind current local registry and CORS 2026-08-17 00:34:58 +02:00
marcopan c34e01e9b9 fix(auth): harden async login boundaries 2026-08-17 00:00:34 +02:00
marcopan 29bfb41363 feat(auth): add local login and CSRF-protected sessions 2026-08-16 23:23:55 +02:00
marcopan 8477a69a29 fix(auth): tighten bridge claim protocol 2026-08-16 22:44:44 +02:00
marcopan 7d9ca13f1d fix(auth): harden Windows storage bridge 2026-08-16 22:16:13 +02:00
marcopan c9b02fc57e fix(auth): add Windows session storage bridge 2026-08-16 21:43:03 +02:00
marcopan 6bf8218fea fix(auth): harden persistent sessions 2026-08-16 21:03:07 +02:00
marcopan ab61c1ad6d feat(auth): persist opaque remembered sessions 2026-08-16 20:28:32 +02:00
marcopan b80a2cc1e9 fix(auth): protect local registry directory 2026-08-16 20:11:30 +02:00
marcopan de8844a4ac fix(auth): bound local password encoding 2026-08-16 20:03:40 +02:00
marcopan 1ed1a34ae2 fix(auth): reject ill-formed local passwords 2026-08-16 19:56:43 +02:00
marcopan 5eed4f9449 feat(auth): verify local ThothII users in the backend 2026-08-16 19:49:02 +02:00
marcopan f6e4dbcae2 feat(auth): add safe Argon2id local user registry 2026-08-16 18:24:20 +02:00
marcopan f99bddcdf0 fix(auth): restore permission boundary safeguards 2026-08-16 18:03:36 +02:00
marcopan 2e0489ce22 feat(auth): centralize ThothII permission enforcement 2026-08-16 17:52:03 +02:00
marcopan 23ac75ce1d fix(auth): declare local development environment 2026-08-16 17:36:42 +02:00
marcopan e54ce15426 fix(auth): fail closed configuration compatibility 2026-08-16 17:35:40 +02:00
marcopan a66ef58766 feat(auth): define strict installation authentication config 2026-08-16 17:26:31 +02:00
marcopan d464f3a982 build: align authentication runtime on Node 24 2026-08-16 17:13:55 +02:00
marcopan bd42aa5934 test: verify read-only workspace secret flow 2026-08-14 18:05:28 +02:00
marcopan a94df262f4 fix: preserve deterministic runtime secret leases 2026-08-14 17:47:17 +02:00
marcopan 87cefd120c feat: configure workspace runtime secrets through API 2026-08-14 17:30:35 +02:00
marcopan 2114c94704 feat: derive workspace runtime secret requirements 2026-08-14 17:26:39 +02:00
marcopan e4999c8420 feat: add encrypted workspace secret store 2026-08-14 17:23:23 +02:00