Commit Graph

  • 8412eb6b3e Accept Tessera (Keycloak-compatible) OIDC tokens as API bearer main tessera-oidc-bearer hzhang 2026-06-02 15:11:30 +01:00
  • 9e1909a7e8 refactor(guild-discovery): drop serviceEndpoint (no longer needed) hzhang 2026-05-23 23:48:19 +01:00
  • 3058bccfb6 feat(guild-discovery): add serviceEndpoint for backend-to-backend reachability hzhang 2026-05-23 22:21:03 +01:00
  • 604f6556fe feat(guild-discovery): add purpose column to guild_nodes + cli set-purpose hzhang 2026-05-23 19:21:49 +01:00
  • ca7c6b408e Merge pull request 'feat(auth): center-scoped single admin + GET /admin-email + cli' (#1) from feat/admin-user into main hzhang 2026-05-22 21:59:14 +00:00
  • 1c1f280553 fix(cli): set-admin transaction uses isAdmin=true filter (TypeORM rejects empty-where) feat/admin-user hzhang 2026-05-22 22:25:06 +01:00
  • f1ca33f2a2 feat(auth): center-scoped single admin + GET /admin-email + cli hzhang 2026-05-22 22:09:58 +01:00
  • 9f7216565b fix(center): graceful 4xx when OIDC issuer/token endpoint unreachable hzhang 2026-05-18 09:47:28 +01:00
  • 2a394969d2 feat(center): OIDC login (auto-provision by email) + CLI config-oidc hzhang 2026-05-18 09:44:49 +01:00
  • 6afb935302 fix(security): close Critical auth gaps (C1/C2/C3) hzhang 2026-05-16 17:47:01 +01:00
  • aa9d59a952 docs: rewrite README to match current architecture hzhang 2026-05-16 12:53:22 +01:00
  • 44aa34d1ff refactor: migrate to ES modules hzhang 2026-05-15 18:47:35 +01:00
  • dea946653b feat(center): API-key agent auth hzhang 2026-05-15 16:52:42 +01:00
  • 3da51a60bc feat(center): POST /auth/resolve-names hzhang 2026-05-15 15:47:01 +01:00
  • bc0d1ba8bf feat(center): user display name + GET/PATCH /auth/me hzhang 2026-05-15 09:09:40 +01:00
  • 2792f78ada fix(center): exempt guild join/members auth endpoints from api-key guard nav 2026-05-15 00:32:33 +00:00
  • 1eb30348a2 feat(center): guild join and guild members APIs; stop auto-joining all guilds nav 2026-05-14 16:57:57 +00:00
  • ebc3571823 fix(center): enable CORS for auth preflight and desktop origins nav 2026-05-14 16:26:55 +00:00
  • 0b32dc8e3c feat(cli): move user and guild registration from API to local CLI nav 2026-05-14 14:43:59 +00:00
  • 7afd220b4a feat(auth): split api-key boundary for frontend auth flow nav 2026-05-14 14:17:07 +00:00
  • 81dfc227e3 refactor(center): prefix environment variables with FABRIC_BACKEND_CENTER nav 2026-05-13 12:58:28 +00:00
  • 0a4cb62065 refactor(center): local-only guild register endpoint without shared secret nav 2026-05-13 08:41:45 +00:00
  • 1c07f43032 refactor(center): introspect relies on api key auth instead of shared secret nav 2026-05-13 08:36:06 +00:00
  • cfa5ccdfaf feat(center): enforce API key on all APIs except node register nav 2026-05-13 08:17:42 +00:00
  • a924bf656d feat(center): issue per-guild tokens and add introspection API root 2026-05-13 07:59:27 +00:00
  • 03a3342d2a feat: bootstrap from Fabric monorepo nav 2026-05-13 07:06:02 +00:00