google-labs-jules[bot]
8ff5090ffa
feat: Implement Ingress Grant Vector Injection for ForwardAuth
...
- Add `domain` column to `apps` table.
- Create Valkey caching layers for app resolution by host (`auth:app_by_host:<host>`) and user grants (`auth:grants:<userId>:<appId>`) with PostgreSQL fallback in `server/auth-session.ts`.
- Update `/api/forward-auth` endpoint to resolve `X-Forwarded-Host`, enforce Default-Deny, check RBAC grants, and inject `X-Forwarded-*` scopes.
- Update relevant unit tests to cover missing and invalid scenarios with correct Mock stubs.
Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
2026-08-24 04:23:04 +00:00
e7f01940b3
fix(spire_ffi): silence noisy cert parse error on invalid certs and add SPIFFE cert unit test
2026-08-23 10:58:40 -07:00
40da6ecbe0
fix(infra): update Dockerfile, setup.ts, and bootstrap admin invite for standalone repo
2026-08-22 10:18:47 -07:00
623e78a7b1
fix(tests): guard valkey.disconnect and format files
2026-08-21 17:31:36 -07:00
google-labs-jules[bot]
9988df3218
audit: verify 3-tier auth, rbac, and decouple server side effects
...
- Add `app` export and wrap startup logic behind `if (import.meta.main)`
- Extract `hono` middleware into `sdk/hono.ts` for clean separation
- Refactor module imports slightly to support in-memory native mocking (`db`, `valkey`, `spire_ffi`, `ratelimit`, `audit`)
- Implement comprehensive native Deno mock tests in `server/main.test.ts`
- Fix type checking across project files
Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
2026-08-22 00:29:19 +00:00
474cc177ce
chore: adopt dual licensing and import task history & scaffolding
...
- Add LICENSE-MIT and LICENSE-APACHE for dual MIT / Apache-2.0 distribution
- Update root LICENSE pointer, README.md, Deno workspace manifests, and Cargo.toml
- Add deno.lock dependency lockfile
- Format AGENTS.md system guidelines
- Import task lifecycle scaffolding and historical story specifications (extract-auth-yes, setup-ts architecture, modular workspace)
2026-08-21 15:20:36 -07:00
ac89e4c8d0
feat: initial commit for auth-yes identity hub
2026-08-21 14:27:36 -07:00
