scriptoriumadmin/skillhub
1
0
Fork 0
mirror of https://github.com/iflytek/skillhub.git synced 2026-08-28 11:25:00 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
1164 commits 193 branches 21 tags 41 MiB
Commit graph

488 commits

Author SHA1 Message Date
XiaoSeS
2c1bcf3b22 fix(auth): harden CAS identity link flow 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 12:01:38 +08:00
XiaoSeS
07c2c9d750 chore(auth): sync CAS adapter with big-main 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 10:35:48 +08:00
XiaoSeS
740e049fba fix(auth): preserve identity link provider failure codes 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 09:50:33 +08:00
XiaoSeS
74fab9734c feat(auth): add CAS 2.0 and 3.0 login adapter 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 09:31:25 +08:00
XiaoSeS
4874ce0dec test(auth): cover identity link terminal states 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 07:45:05 +08:00
XiaoSeS
9557478dd8 feat(auth): add explicit identity link and safe unlink flow 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 07:02:17 +08:00
XiaoSeS
2100c259c2 test(auth): use sealed provider handle fixture 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 02:10:04 +08:00
XiaoSeS
09a74cad1e fix(auth): harden provider adapter boundaries 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 02:06:58 +08:00
XiaoSeS
c6fe19e2c8 chore(auth): merge big-main into provider registry 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 01:46:38 +08:00
XiaoSeS
c81c9ab3ed fix(db): resolve identity migration version collision 
Preserve the V44 compliance index reserved by PR #561 and renumber the unreleased identity migrations to V45-V48.

Refs #561

Refs #652

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 01:16:27 +08:00
XiaoSeS
4fe1563e5f fix(auth): use portable user row lock 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 00:36:39 +08:00
XiaoSeS
c6e390f643 chore(auth): sync binding contract gate 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 00:32:44 +08:00
XiaoSeS
50a35f3aa9
Merge pull request #650 from iflytek/feature/identity-binding-contract-gate 
feat(auth): enforce identity binding v2 contract gate
 2026-07-31 00:32:04 +08:00
XiaoSeS
a180ea9acb test(auth): select dialect per identity database 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 00:31:26 +08:00
XiaoSeS
4108107c21 fix(auth): close profile provisioning guardrails 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-31 00:26:30 +08:00
XiaoSeS
f7855a5fe2
Merge pull request #649 from iflytek/feat/identity-binding-v2 
feat(auth): add identity binding v2 expand
 2026-07-30 23:57:39 +08:00
XiaoSeS
dc93270363
Merge pull request #648 from iflytek/test/auth-identity-core-guardrails 
test(auth): strengthen identity core guardrails
 2026-07-30 23:56:15 +08:00
XiaoSeS
2c7466118e feat(auth): add unified provider registry 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 23:31:36 +08:00
XiaoSeS
96cf43f049 test(auth): isolate profile provisioning database 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 22:23:58 +08:00
XiaoSeS
c359e8bf96 test(auth): update profile controller fixtures 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 22:18:43 +08:00
XiaoSeS
dd0b9d15a4 test(auth): align profile sync validation 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 22:13:34 +08:00
XiaoSeS
b217339012 feat(auth): add profile sync and provisioning policies 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 22:02:24 +08:00
XiaoSeS
b4942b423f chore(auth): integrate binding provider preflight 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 21:18:05 +08:00
XiaoSeS
bbffb3281c fix(auth): report unconfigured legacy identity providers 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 21:13:06 +08:00
XiaoSeS
b91408e799 chore(auth): integrate binding migration preflight 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 21:05:11 +08:00
XiaoSeS
c9a3933677 fix(auth): reject unsafe identity binding migrations 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 20:59:56 +08:00
XiaoSeS
524111f414 feat(auth): enforce identity binding contract gate 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 20:47:53 +08:00
XiaoSeS
35cfb9f3ea feat(auth): add identity binding v2 expand 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 20:34:47 +08:00
XiaoSeS
98e2bd7bf6 Merge issue #597 observability fix into big-main 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 20:33:30 +08:00
XiaoSeS
0b31c1636a fix(search): improve async rebuild observability 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 20:20:27 +08:00
XiaoSeS
0320c20623 docs(auth): document authority recovery contract 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 19:35:08 +08:00
XiaoSeS
ed170a8fef test(auth): strengthen identity guardrail isolation 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 19:34:59 +08:00
XiaoSeS
8bca180a67 fix(auth): preserve provider readiness status 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 18:15:03 +08:00
XiaoSeS
fa1f9685b0 fix(auth): inspect OAuth routes by request URI 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 18:15:03 +08:00
XiaoSeS
6638e03092 test(auth): declare ready provider catalog fixture 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 18:15:03 +08:00
XiaoSeS
ffc9e514e0 fix(auth): select trusted provider constructor 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 18:15:03 +08:00
XiaoSeS
a95d639eb7 test(auth): use concrete OAuth registrations 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 18:15:03 +08:00
XiaoSeS
9ef272e32b fix(auth): reject stale provider authority recovery 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 18:15:03 +08:00
XiaoSeS
c71828f980 feat(auth): introduce unified identity core 
Refs #640

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 18:15:03 +08:00
XiaoSeS
dfd7e38fd0 chore(integration): stage issue #611 on big-main 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 17:52:56 +08:00
XiaoSeS
b264f3a0d2 fix(governance): safely delete version dependencies 
Remove terminal review tasks before deleting an allowed skill version. Lock all versions of the aggregate in stable order so concurrent deletes preserve the last-version invariant and return business errors instead of 500 responses.

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-30 17:52:08 +08:00
ylhu16
a13429a95e fix(auth): isolate unsafe account merge flow 
Keep the legacy routes fail-closed, remove the unsafe orchestration service, replace the UI controls with a security notice, and define the acceptance contract for the future safe merge flow.

Closes #634

Parent: #628

Signed-off-by: ylhu16 <ylhu16@iflytek.com>
 2026-07-30 15:57:43 +08:00
ylhu16
8b09a1330a chore(integration): stage issue #632 on big-main 
Signed-off-by: ylhu16 <ylhu16@iflytek.com>

# Conflicts:
#	docs/02-domain-model.md
#	server/skillhub-auth/src/test/java/com/iflytek/skillhub/auth/identity/IdentityBindingServiceTest.java
 2026-07-30 15:29:05 +08:00
ylhu16
fe1c6e718b fix(auth): harden approved account activation flow 
Signed-off-by: ylhu16 <ylhu16@iflytek.com>
 2026-07-30 15:20:12 +08:00
ylhu16
075683963e fix(auth): provision global membership on user approval 
Closes #632

Signed-off-by: ylhu16 <ylhu16@iflytek.com>
 2026-07-30 15:03:26 +08:00
ylhu16
3f1eebd1e6 fix(auth): enforce trusted OAuth identity attributes 
Signed-off-by: ylhu16 <ylhu16@iflytek.com>
 2026-07-30 14:33:34 +08:00
XiaoSeS
3db3c9685f feat(redis): complete cluster connection support 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-29 17:36:06 +08:00
XiaoSeS
dad3c15f92 chore(redis): merge current main for cluster support 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-29 16:11:31 +08:00
XiaoSeS
2854b26b5d fix(helm): resolve deployment review blockers 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-29 14:04:26 +08:00
XiaoSeS
e72c17b09f chore(helm): merge current main for validation 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-07-29 13:49:18 +08:00