Commit Graph
251 Commits
Author SHA1 Message Date
marcopan db375298d0 fix(test): hermetically exercise auth workflows 2026-08-25 18:27:41 +02:00
marcopan 8980c35198 fix(ci): align Windows Compose topology 2026-08-25 17:14:42 +02:00
marcopan 6d0cb6d997 fix(ci): provision integration fixtures 2026-08-25 17:07:51 +02:00
marcopan 610ae8c85a fix(auth): make local verification portable
Keep upstream identity visible while limiting logout to local auth. Inject the restore privilege gate so the deterministic core tests do not depend on the host OS, and confine descriptor-backed projection tests to Linux. Accept the real remaining Pi timeout budget instead of an exact millisecond.
2026-08-25 10:50:30 +02:00
marcopan 0caa747914 fix(evidence): validate curated runtime corpus 2026-08-25 01:59:27 +02:00
marcopan 9f0184388d docs(evidence): publish curated-only workspace contract 2026-08-25 01:52:27 +02:00
marcopan 29d41ac258 feat(evidence): use server-side Qdrant BM25 retrieval 2026-08-24 18:15:33 +02:00
marcopan 0e9add09a9 feat(evidence): add Qdrant BM25 vector in place 2026-08-24 18:01:46 +02:00
marcopan fa2298653b fix(ui): stream phase progress without gates 2026-08-24 12:10:56 +02:00
marcopan f375515dc0 refactor(evidence): extract TypeScript lifecycle (#32) 2026-08-24 02:50:56 +02:00
User abd68470da fix(auth): expose trusted upstream mode 2026-08-22 16:29:30 +02:00
User cc72e65f9d fix(workspaces): align postgres connection diagnostics 2026-08-22 13:49:21 +02:00
User 3d9a9f0675 feat(server): activate projected authentication safely 2026-08-22 01:01:36 +02:00
User 1e2c4e65c5 fix(auth): close CURRENT publication race 2026-08-21 22:51:38 +02:00
User da2f4a6681 fix(auth): harden runtime projection validation 2026-08-21 22:46:42 +02:00
User 05f8615887 feat(auth): load immutable runtime projection snapshots 2026-08-21 22:31:38 +02:00
marcopan d43738eeae fix(auth): require local registry ownership 2026-08-18 10:31:44 +02:00
marcopan 2b618c5a0f test(auth): harden Task 15 OIDC smoke evidence 2026-08-18 06:33:48 +02:00
marcopan 8a3fa5031d test(auth): gate local and OIDC authentication release 2026-08-18 06:02:25 +02:00
marcopan dee17893b4 fix(auth): harden restore verification transaction 2026-08-18 00:58:12 +02:00
marcopan 0651f3316f fix(auth): validate stopped workspace restore 2026-08-18 00:06:28 +02:00
marcopan e8b9995ed0 feat(auth): integrate authentication with installation lifecycle 2026-08-17 23:33:51 +02:00
marcopan 0d0c15b4b8 fix(auth): complete Task 13 deployment review 2026-08-17 22:15:41 +02:00
marcopan 7e52df2702 fix(auth): address Task 13 deployment review findings 2026-08-17 21:31:25 +02:00
marcopan ef244ab56d fix(auth): harden unified diagnostic execution 2026-08-17 17:25:26 +02:00
marcopan 30ee9433dc fix(auth): harden unified diagnostic execution 2026-08-17 16:39:54 +02:00
marcopan 3ed00ff086 feat(auth): include authentication in workspace and tht diagnostics 2026-08-17 15:51:16 +02:00
marcopan cb0e873ed7 fix(auth): pin native auth storage operations 2026-08-17 14:52:21 +02:00
marcopan 6d438f4c7e fix(auth): close diagnostic filesystem races 2026-08-17 13:04:15 +02:00
marcopan be1724890a fix(auth): make diagnostics bounded and portable 2026-08-17 12:19:19 +02:00
marcopan 7cfbee36fa fix(auth): make diagnostics match runtime safety 2026-08-17 11:23:52 +02:00
marcopan f0ae680671 feat(auth): validate mapped groups through Authentik 2026-08-17 10:44:56 +02:00
marcopan 33ae7cfdc2 fix(auth): bound all OIDC provider exchanges 2026-08-17 10:03:07 +02:00
marcopan c86f01e886 fix(auth): paginate session maintenance safely 2026-08-17 09:05:20 +02:00
marcopan 3e7bb11313 fix(auth): isolate bounded OIDC cleanup 2026-08-17 07:46:43 +02:00
marcopan bdabecbb63 fix(auth): bound OIDC initiation and transport 2026-08-17 07:03:19 +02:00
marcopan 8573500121 fix(auth): harden OIDC browser transactions 2026-08-17 06:18:49 +02:00
marcopan 4fe51cbeb1 feat(auth): add generic OIDC login with mandatory groups 2026-08-17 05:44:10 +02:00
marcopan 8c67cb75dc fix(auth): honor HTTPS sessions in Pi management 2026-08-17 01:46:34 +02:00
marcopan 09e546c1ef fix(auth): bind request auth snapshots 2026-08-17 01:11:25 +02:00
marcopan 94c2cd3709 fix(auth): bind current local registry and CORS 2026-08-17 00:34:58 +02:00
marcopan c34e01e9b9 fix(auth): harden async login boundaries 2026-08-17 00:00:34 +02:00
marcopan 29bfb41363 feat(auth): add local login and CSRF-protected sessions 2026-08-16 23:23:55 +02:00
marcopan 8477a69a29 fix(auth): tighten bridge claim protocol 2026-08-16 22:44:44 +02:00
marcopan 7d9ca13f1d fix(auth): harden Windows storage bridge 2026-08-16 22:16:13 +02:00
marcopan c9b02fc57e fix(auth): add Windows session storage bridge 2026-08-16 21:43:03 +02:00
marcopan 6bf8218fea fix(auth): harden persistent sessions 2026-08-16 21:03:07 +02:00
marcopan ab61c1ad6d feat(auth): persist opaque remembered sessions 2026-08-16 20:28:32 +02:00
marcopan b80a2cc1e9 fix(auth): protect local registry directory 2026-08-16 20:11:30 +02:00
marcopan de8844a4ac fix(auth): bound local password encoding 2026-08-16 20:03:40 +02:00