scriptoriumadmin/skillhub
1
0
Fork 0
mirror of https://github.com/iflytek/skillhub.git synced 2026-10-11 03:37:57 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
1536 commits 263 branches 29 tags 41 MiB
Commit graph

21 commits

Author SHA1 Message Date
XiaoSeS
44a311ea80 feat(auth): improve system settings interactions 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 16:25:12 +08:00
XiaoSeS
6842b40132 test(auth): persist initial grant audit in PostgreSQL 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
e8de0059ef test(auth): cover competing initial grants and smoke endpoints 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
5120f4f046 test(auth): verify initial role grants in PostgreSQL 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
ad2412c075 fix(auth): preserve login on existing installations 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
f297fdfd09 fix(auth): verify initial grants and auth UI behavior 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
df9b869d8e feat(auth): add system login settings and initial role grants 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-10 15:42:17 +08:00
XiaoSeS
84bda97dee feat(promotion): support reviewed global updates and revocation 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-09 18:14:59 +08:00
XiaoSeS
17273bb6ca docs(auth): decouple organization APIs from OIDC controls 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-24 15:44:56 +08:00
XiaoSeS
1e2de2798b test(auth): verify organization creation rollback 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-24 15:14:16 +08:00
XiaoSeS
52e4e052a1 feat(auth): add organization creation control plane slice 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-24 14:43:17 +08:00
XiaoSeS
3de0b94a9a
fix(auth): harden oauth token and claim logging (#895) 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-22 15:24:31 +08:00
XiaoSeS
f87849fe3e
feat(auth): unified identity core with LEGACY/SHADOW/ACTIVE rollout (#874) 
## Summary

Introduces the unified enterprise identity core (R1-A) with LEGACY, SHADOW, and ACTIVE rollout modes, the organization domain model, external identity V2 foundation, and OAuth login routing through the identity core.

## Changes

- **Identity Core** (`skillhub-auth/federation/*`): ExternalIdentityLoginModule, IdentityLoginGuard, IdentityCorrelationPolicy, ProfileAuthorityResolver with LEGACY/SHADOW/ACTIVE mode switching
- **Organization Foundation**: Organization, OrganizationDomain, OrganizationMembership, OrganizationRoleBinding domain model with domain-proof verification
- **External Identity V2**: ExternalIdentity, PreProvisionedLoginSubject, LegacyIdentityBindingDualReader for dual-read compatibility
- **OAuth Routing**: OAuthLoginFlowService routes GitHub/GitLab OAuth through the unified identity core, hardened return-to handling
- **Migrations**: V60-V65 (organization foundation, audit log context, external identity V2, preprovisioned login subject, login correlation policy, legacy backfill)

## Review

- ✅ 160 files, +10,311/-26
- ✅ Default LEGACY mode: zero behavior change
- ✅ ACTIVE mode: GitHub & GitLab OAuth login chains verified end-to-end (local staging)
- ✅ SQL migrations V60-V65 applied successfully on PostgreSQL 16
- ✅ Backend tests: 1,010 tests, 0 failures (Java 21)
- ✅ CI: Server Unit Tests ✅ | Web Build ✅ | Docs Build ✅ | E2E ✅ | RISC-V ✅ | DCO ✅
- ✅ 2 minor fixes applied: OAuthIdentityCoreException explicit handling, public OAuth browser endpoint routing

## Rollout

See `openspec/changes/enterprise-identity-platform/rollout-plan.md`.

Made with [Proma](https://proma.cool) · [GitHub](https://github.com/proma-ai/Proma)
 2026-09-18 14:34:37 +08:00
XiaoSeS
b4779735bd
feat(suite): publish suites from multi-skill bundles 2026-09-17 11:16:39 +08:00
XiaoSeS
5aa66ddc7d fix(cli): protect suite upgrades from local changes 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-09 18:30:06 +08:00
XiaoSeS
bf1b293e1f fix(suite): address final review findings 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-09 18:20:39 +08:00
XiaoSeS
8c0b853023 fix(suite): close rollout and concurrency gaps 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-09 13:54:59 +08:00
XiaoSeS
a4b35b236a fix(suite): bind exact members and protect local installs 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-09 13:54:59 +08:00
XiaoSeS
d0e8c168fa feat(suite): require and expose entry skill 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-09 13:54:59 +08:00
XiaoSeS
859987e3bb feat(suite): add first-class skill suites 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-08 19:30:57 +08:00
XiaoSeS
accd0e1f67 docs(spec): define skill suite lifecycle and compatibility 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-09-07 16:52:26 +08:00