Commit graph

1149 commits

Author SHA1 Message Date
XiaoSeS
7b3f1144f7 fix(ci): wait for final PostgreSQL process
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 00:46:27 +08:00
XiaoSeS
4fe1563e5f fix(auth): use portable user row lock
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 00:36:39 +08:00
XiaoSeS
c6e390f643 chore(auth): sync binding contract gate
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 00:32:44 +08:00
XiaoSeS
50a35f3aa9
Merge pull request #650 from iflytek/feature/identity-binding-contract-gate
feat(auth): enforce identity binding v2 contract gate
2026-07-31 00:32:04 +08:00
XiaoSeS
a180ea9acb test(auth): select dialect per identity database
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 00:31:26 +08:00
XiaoSeS
4108107c21 fix(auth): close profile provisioning guardrails
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 00:26:30 +08:00
XiaoSeS
32ee1d8108 fix(ci): expose binding v2 test startup failures
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 00:19:13 +08:00
XiaoSeS
636739492f fix(ci): make identity test Java detection pipe-safe
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 00:12:44 +08:00
XiaoSeS
f7855a5fe2
Merge pull request #649 from iflytek/feat/identity-binding-v2
feat(auth): add identity binding v2 expand
2026-07-30 23:57:39 +08:00
XiaoSeS
dc93270363
Merge pull request #648 from iflytek/test/auth-identity-core-guardrails
test(auth): strengthen identity core guardrails
2026-07-30 23:56:15 +08:00
XiaoSeS
96cf43f049 test(auth): isolate profile provisioning database
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 22:23:58 +08:00
XiaoSeS
c359e8bf96 test(auth): update profile controller fixtures
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 22:18:43 +08:00
XiaoSeS
dd0b9d15a4 test(auth): align profile sync validation
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 22:13:34 +08:00
XiaoSeS
b217339012 feat(auth): add profile sync and provisioning policies
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 22:02:24 +08:00
XiaoSeS
b4942b423f chore(auth): integrate binding provider preflight
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 21:18:05 +08:00
XiaoSeS
bbffb3281c fix(auth): report unconfigured legacy identity providers
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 21:13:06 +08:00
XiaoSeS
b91408e799 chore(auth): integrate binding migration preflight
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 21:05:11 +08:00
XiaoSeS
c9a3933677 fix(auth): reject unsafe identity binding migrations
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 20:59:56 +08:00
XiaoSeS
524111f414 feat(auth): enforce identity binding contract gate
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 20:47:53 +08:00
XiaoSeS
35cfb9f3ea feat(auth): add identity binding v2 expand
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 20:34:47 +08:00
XiaoSeS
98e2bd7bf6 Merge issue #597 observability fix into big-main
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 20:33:30 +08:00
XiaoSeS
0b31c1636a fix(search): improve async rebuild observability
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 20:20:27 +08:00
XiaoSeS
c1b44d01be
Merge pull request #641 from iflytek/fix/issue-611-child-fks
fix(governance): safely delete version dependencies
2026-07-30 20:05:28 +08:00
XiaoSeS
0320c20623 docs(auth): document authority recovery contract
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 19:35:08 +08:00
XiaoSeS
ed170a8fef test(auth): strengthen identity guardrail isolation
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 19:34:59 +08:00
XiaoSeS
2978bee316
feat(auth): introduce unified identity core (#643)
Refs #640
2026-07-30 18:29:10 +08:00
XiaoSeS
c089797979 docs(auth): record issue 640 verification
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:17:42 +08:00
XiaoSeS
7dc084c47d chore(api): regenerate identity provider types
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00
XiaoSeS
8bca180a67 fix(auth): preserve provider readiness status
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00
XiaoSeS
fa1f9685b0 fix(auth): inspect OAuth routes by request URI
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00
XiaoSeS
6638e03092 test(auth): declare ready provider catalog fixture
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00
XiaoSeS
ffc9e514e0 fix(auth): select trusted provider constructor
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00
XiaoSeS
a95d639eb7 test(auth): use concrete OAuth registrations
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00
XiaoSeS
9ef272e32b fix(auth): reject stale provider authority recovery
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00
XiaoSeS
c71828f980 feat(auth): introduce unified identity core
Refs #640

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00
XiaoSeS
dfd7e38fd0 chore(integration): stage issue #611 on big-main
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 17:52:56 +08:00
XiaoSeS
b264f3a0d2 fix(governance): safely delete version dependencies
Remove terminal review tasks before deleting an allowed skill version. Lock all versions of the aggregate in stable order so concurrent deletes preserve the last-version invariant and return business errors instead of 500 responses.

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 17:52:08 +08:00
ylhu16
93e5c4e004 chore(integration): stage unified identity design on big-main 2026-07-30 16:08:19 +08:00
ylhu16
f7360b69d6 chore(integration): stage issue #634 on big-main 2026-07-30 15:58:55 +08:00
ylhu16
a13429a95e fix(auth): isolate unsafe account merge flow
Keep the legacy routes fail-closed, remove the unsafe orchestration service, replace the UI controls with a security notice, and define the acceptance contract for the future safe merge flow.

Closes #634

Parent: #628

Signed-off-by: ylhu16 <ylhu16@iflytek.com>
2026-07-30 15:57:43 +08:00
ylhu16
8b09a1330a chore(integration): stage issue #632 on big-main
Signed-off-by: ylhu16 <ylhu16@iflytek.com>

# Conflicts:
#	docs/02-domain-model.md
#	server/skillhub-auth/src/test/java/com/iflytek/skillhub/auth/identity/IdentityBindingServiceTest.java
2026-07-30 15:29:05 +08:00
ylhu16
fe1c6e718b fix(auth): harden approved account activation flow
Signed-off-by: ylhu16 <ylhu16@iflytek.com>
2026-07-30 15:20:12 +08:00
ylhu16
075683963e fix(auth): provision global membership on user approval
Closes #632

Signed-off-by: ylhu16 <ylhu16@iflytek.com>
2026-07-30 15:03:26 +08:00
ylhu16
7774935d34 chore(integration): stage issue #629 on big-main 2026-07-30 14:42:25 +08:00
ylhu16
072a3f5a5a Merge remote-tracking branch 'origin/main' into big-main 2026-07-30 14:42:11 +08:00
ylhu16
0dd16575ba docs(auth): define unified identity federation architecture
Signed-off-by: ylhu16 <ylhu16@iflytek.com>
2026-07-30 14:38:22 +08:00
ylhu16
3f1eebd1e6 fix(auth): enforce trusted OAuth identity attributes
Signed-off-by: ylhu16 <ylhu16@iflytek.com>
2026-07-30 14:33:34 +08:00
XiaoSeS
6817d98007
Merge pull request #367 from xring/fix/postgres-lostfound
Some checks are pending
Deploy Docs / build (push) Waiting to run
Deploy Docs / Deploy (push) Blocked by required conditions
Security / Dependency Review (push) Waiting to run
Security / CodeQL (java-kotlin) (push) Waiting to run
Security / CodeQL (javascript-typescript) (push) Waiting to run
Security / CodeQL (python) (push) Waiting to run
fix(deploy): isolate PostgreSQL data from volume root
2026-07-30 09:56:00 +08:00
XiaoSeS
51a1685b8f
Merge pull request #603 from FenjuFu/docs/trendshift-aaif-badges
docs: add Trendshift trending and AAIF member badges to README
2026-07-30 09:13:11 +08:00
XiaoSeS
e3a947a7c8
Merge pull request #505 from mosesyu95/main
feat(redis): add support for standalone and cluster Redis modes
2026-07-30 09:05:53 +08:00