Commit graph

502 commits

Author SHA1 Message Date
XiaoSeS
3c8b62a664 fix(auth): harden LDAP identity assertions
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 21:54:49 +08:00
XiaoSeS
a35bdce3c6 feat(auth): add LDAP and Active Directory adapter
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 19:13:32 +08:00
XiaoSeS
51d781908d fix(auth): omit account merge request bodies from logs
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 17:34:06 +08:00
XiaoSeS
c6b18c6be6 Merge pull request #668 from feature/identity-account-merge
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 17:17:36 +08:00
XiaoSeS
fd49ad9170 feat(auth): add secure account merging
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 17:07:43 +08:00
XiaoSeS
7f5d5466ff chore(integration): stage observability boundary fixes
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 15:52:20 +08:00
XiaoSeS
e9a913e30b fix(observability): tighten tracing integration boundaries
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 15:51:31 +08:00
XiaoSeS
c7bd56e77a Merge PR #635: builtin-skills starter collection 2026-07-31 14:35:08 +08:00
wowo-zZ
7885cc568b feat(builtin-skills): add reviewed starter collection
Signed-off-by: wowo-zZ <zhenggui5228@126.com>
2026-07-31 14:22:23 +08:00
XiaoSeS
e7bde3e177 chore(integration): stage CAS adapter on big-main
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 12:05:54 +08:00
XiaoSeS
85fb05ff8f chore(integration): stage observability validation on big-main
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 12:02:45 +08:00
XiaoSeS
2c1bcf3b22 fix(auth): harden CAS identity link flow
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 12:01:38 +08:00
XiaoSeS
91fb155ef1 feat(observability): propagate async trace context
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 11:22:12 +08:00
XiaoSeS
f805076c5c feat(observability): add selectable tracing modes
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 11:06:13 +08:00
XiaoSeS
893c0d49ca feat(observability): establish request correlation boundary
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 10:49:32 +08:00
XiaoSeS
07c2c9d750 chore(auth): sync CAS adapter with big-main
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 10:35:48 +08:00
XiaoSeS
740e049fba fix(auth): preserve identity link provider failure codes
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 09:50:33 +08:00
XiaoSeS
74fab9734c feat(auth): add CAS 2.0 and 3.0 login adapter
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 09:31:25 +08:00
XiaoSeS
4874ce0dec test(auth): cover identity link terminal states
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 07:45:05 +08:00
XiaoSeS
9557478dd8 feat(auth): add explicit identity link and safe unlink flow
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 07:02:17 +08:00
XiaoSeS
2100c259c2 test(auth): use sealed provider handle fixture
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 02:10:04 +08:00
XiaoSeS
09a74cad1e fix(auth): harden provider adapter boundaries
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 02:06:58 +08:00
XiaoSeS
c6fe19e2c8 chore(auth): merge big-main into provider registry
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 01:46:38 +08:00
XiaoSeS
c81c9ab3ed fix(db): resolve identity migration version collision
Preserve the V44 compliance index reserved by PR #561 and renumber the unreleased identity migrations to V45-V48.

Refs #561

Refs #652

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 01:16:27 +08:00
XiaoSeS
4fe1563e5f fix(auth): use portable user row lock
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 00:36:39 +08:00
XiaoSeS
c6e390f643 chore(auth): sync binding contract gate
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 00:32:44 +08:00
XiaoSeS
50a35f3aa9
Merge pull request #650 from iflytek/feature/identity-binding-contract-gate
feat(auth): enforce identity binding v2 contract gate
2026-07-31 00:32:04 +08:00
XiaoSeS
a180ea9acb test(auth): select dialect per identity database
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 00:31:26 +08:00
XiaoSeS
4108107c21 fix(auth): close profile provisioning guardrails
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-31 00:26:30 +08:00
XiaoSeS
f7855a5fe2
Merge pull request #649 from iflytek/feat/identity-binding-v2
feat(auth): add identity binding v2 expand
2026-07-30 23:57:39 +08:00
XiaoSeS
dc93270363
Merge pull request #648 from iflytek/test/auth-identity-core-guardrails
test(auth): strengthen identity core guardrails
2026-07-30 23:56:15 +08:00
XiaoSeS
2c7466118e feat(auth): add unified provider registry
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 23:31:36 +08:00
XiaoSeS
96cf43f049 test(auth): isolate profile provisioning database
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 22:23:58 +08:00
XiaoSeS
c359e8bf96 test(auth): update profile controller fixtures
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 22:18:43 +08:00
XiaoSeS
dd0b9d15a4 test(auth): align profile sync validation
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 22:13:34 +08:00
XiaoSeS
b217339012 feat(auth): add profile sync and provisioning policies
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 22:02:24 +08:00
XiaoSeS
b4942b423f chore(auth): integrate binding provider preflight
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 21:18:05 +08:00
XiaoSeS
bbffb3281c fix(auth): report unconfigured legacy identity providers
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 21:13:06 +08:00
XiaoSeS
b91408e799 chore(auth): integrate binding migration preflight
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 21:05:11 +08:00
XiaoSeS
c9a3933677 fix(auth): reject unsafe identity binding migrations
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 20:59:56 +08:00
XiaoSeS
524111f414 feat(auth): enforce identity binding contract gate
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 20:47:53 +08:00
XiaoSeS
35cfb9f3ea feat(auth): add identity binding v2 expand
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 20:34:47 +08:00
XiaoSeS
98e2bd7bf6 Merge issue #597 observability fix into big-main
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 20:33:30 +08:00
XiaoSeS
0b31c1636a fix(search): improve async rebuild observability
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 20:20:27 +08:00
XiaoSeS
0320c20623 docs(auth): document authority recovery contract
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 19:35:08 +08:00
XiaoSeS
ed170a8fef test(auth): strengthen identity guardrail isolation
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 19:34:59 +08:00
XiaoSeS
8bca180a67 fix(auth): preserve provider readiness status
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00
XiaoSeS
fa1f9685b0 fix(auth): inspect OAuth routes by request URI
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00
XiaoSeS
6638e03092 test(auth): declare ready provider catalog fixture
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00
XiaoSeS
ffc9e514e0 fix(auth): select trusted provider constructor
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-07-30 18:15:03 +08:00