This website requires JavaScript.
8412eb6b3e
Accept Tessera (Keycloak-compatible) OIDC tokens as API bearer
main
tessera-oidc-bearer
hzhang
2026-06-02 15:11:30 +01:00
9e1909a7e8
refactor(guild-discovery): drop serviceEndpoint (no longer needed)
hzhang
2026-05-23 23:48:19 +01:00
3058bccfb6
feat(guild-discovery): add serviceEndpoint for backend-to-backend reachability
hzhang
2026-05-23 22:21:03 +01:00
604f6556fe
feat(guild-discovery): add purpose column to guild_nodes + cli set-purpose
hzhang
2026-05-23 19:21:49 +01:00
ca7c6b408e
Merge pull request 'feat(auth): center-scoped single admin + GET /admin-email + cli' (#1 ) from feat/admin-user into main
hzhang
2026-05-22 21:59:14 +00:00
1c1f280553
fix(cli): set-admin transaction uses isAdmin=true filter (TypeORM rejects empty-where)
feat/admin-user
hzhang
2026-05-22 22:25:06 +01:00
f1ca33f2a2
feat(auth): center-scoped single admin + GET /admin-email + cli
hzhang
2026-05-22 22:09:58 +01:00
9f7216565b
fix(center): graceful 4xx when OIDC issuer/token endpoint unreachable
hzhang
2026-05-18 09:47:28 +01:00
2a394969d2
feat(center): OIDC login (auto-provision by email) + CLI config-oidc
hzhang
2026-05-18 09:44:49 +01:00
6afb935302
fix(security): close Critical auth gaps (C1/C2/C3)
hzhang
2026-05-16 17:47:01 +01:00
aa9d59a952
docs: rewrite README to match current architecture
hzhang
2026-05-16 12:53:22 +01:00
44aa34d1ff
refactor: migrate to ES modules
hzhang
2026-05-15 18:47:35 +01:00
dea946653b
feat(center): API-key agent auth
hzhang
2026-05-15 16:52:42 +01:00
3da51a60bc
feat(center): POST /auth/resolve-names
hzhang
2026-05-15 15:47:01 +01:00
bc0d1ba8bf
feat(center): user display name + GET/PATCH /auth/me
hzhang
2026-05-15 09:09:40 +01:00
2792f78ada
fix(center): exempt guild join/members auth endpoints from api-key guard
nav
2026-05-15 00:32:33 +00:00
1eb30348a2
feat(center): guild join and guild members APIs; stop auto-joining all guilds
nav
2026-05-14 16:57:57 +00:00
ebc3571823
fix(center): enable CORS for auth preflight and desktop origins
nav
2026-05-14 16:26:55 +00:00
0b32dc8e3c
feat(cli): move user and guild registration from API to local CLI
nav
2026-05-14 14:43:59 +00:00
7afd220b4a
feat(auth): split api-key boundary for frontend auth flow
nav
2026-05-14 14:17:07 +00:00
81dfc227e3
refactor(center): prefix environment variables with FABRIC_BACKEND_CENTER
nav
2026-05-13 12:58:28 +00:00
0a4cb62065
refactor(center): local-only guild register endpoint without shared secret
nav
2026-05-13 08:41:45 +00:00
1c07f43032
refactor(center): introspect relies on api key auth instead of shared secret
nav
2026-05-13 08:36:06 +00:00
cfa5ccdfaf
feat(center): enforce API key on all APIs except node register
nav
2026-05-13 08:17:42 +00:00
a924bf656d
feat(center): issue per-guild tokens and add introspection API
root
2026-05-13 07:59:27 +00:00
03a3342d2a
feat: bootstrap from Fabric monorepo
nav
2026-05-13 07:06:02 +00:00