Find a file
vsxd 5c4be0a26f feat(auth): add OAuth2 login, access policy, API token, and RBAC
Task 10b: OAuth Claims + Access Policy
- OAuthClaims record, OAuthClaimsExtractor SPI, GitHubClaimsExtractor
- AccessPolicy SPI with Open/EmailDomain/ProviderAllowlist/SubjectWhitelist
- AccessPolicyFactory with config-driven strategy selection
- 8 unit tests for access policies

Task 11: Identity binding + OAuth2 user service
- PlatformPrincipal session-serializable record
- IdentityBindingService: bind-or-create on OAuth login
- CustomOAuth2UserService: policy evaluation + identity binding
- OAuth2LoginSuccessHandler: store principal in session

Task 12: API Token + RBAC
- ApiTokenService: SHA-256 hashed token create/validate/revoke
- ApiTokenAuthenticationFilter: Bearer token authentication
- RbacService: role/permission queries with SUPER_ADMIN bypass
2026-03-11 23:48:16 +08:00
docs feat: project ini and docs updates 2026-03-11 22:47:05 +08:00
server feat(auth): add OAuth2 login, access policy, API token, and RBAC 2026-03-11 23:48:16 +08:00
.gitignore chore: ignore local git worktrees 2026-03-11 23:16:57 +08:00
docker-compose.yml feat: complete Chunk 1 - backend skeleton and infrastructure 2026-03-11 23:35:47 +08:00
LICENSE Initial commit 2026-03-11 20:17:06 +08:00
Makefile feat: complete Chunk 1 - backend skeleton and infrastructure 2026-03-11 23:35:47 +08:00