4 Commits

Author	SHA1	Message	Date
Tyler Gillispie	7420401147	fix(cookie): dynamically calculate parent wildcard domain (.atyg.org) to prevent host-scoping redirect loop	2026-08-24 13:11:17 -07:00
google-labs-jules[bot]	8ff5090ffa	feat: Implement Ingress Grant Vector Injection for ForwardAuth ... - Add `domain` column to `apps` table. - Create Valkey caching layers for app resolution by host (`auth:app_by_host:<host>`) and user grants (`auth:grants:<userId>:<appId>`) with PostgreSQL fallback in `server/auth-session.ts`. - Update `/api/forward-auth` endpoint to resolve `X-Forwarded-Host`, enforce Default-Deny, check RBAC grants, and inject `X-Forwarded-*` scopes. - Update relevant unit tests to cover missing and invalid scenarios with correct Mock stubs. Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>	2026-08-24 04:23:04 +00:00
google-labs-jules[bot]	9988df3218	audit: verify 3-tier auth, rbac, and decouple server side effects ... - Add `app` export and wrap startup logic behind `if (import.meta.main)` - Extract `hono` middleware into `sdk/hono.ts` for clean separation - Refactor module imports slightly to support in-memory native mocking (`db`, `valkey`, `spire_ffi`, `ratelimit`, `audit`) - Implement comprehensive native Deno mock tests in `server/main.test.ts` - Fix type checking across project files Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>	2026-08-22 00:29:19 +00:00
Tyler Gillispie	ac89e4c8d0	feat: initial commit for auth-yes identity hub	2026-08-21 14:27:36 -07:00