scriptoriumadmin/veritas-kanban
1
0
Fork 0
mirror of https://github.com/BradGroux/veritas-kanban.git synced 2026-10-11 06:07:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
veritas-kanban/docs
History
Brad Groux 55c742c2df feat(server): Add authentication & authorization system 
- Add auth middleware (server/src/middleware/auth.ts)
  - API key authentication via Bearer token, X-API-Key header, or query param
  - Role-based authorization (admin, agent, read-only)
  - Localhost bypass option for development
  - WebSocket connection authentication

- Update index.ts to integrate auth middleware
  - Apply authenticate middleware to all /api routes
  - Add /api/auth/status endpoint for diagnostics
  - Protect WebSocket connections with token validation
  - Display auth status in startup banner

- Add configuration via environment variables
  - VERITAS_AUTH_ENABLED (default: true)
  - VERITAS_AUTH_LOCALHOST_BYPASS (default: false)
  - VERITAS_ADMIN_KEY for admin access
  - VERITAS_API_KEYS for named keys with roles

- Add comprehensive security documentation (docs/security.md)
- Add .env.example with all auth configuration options

Closes RF-01
2026-01-28 07:37:44 -06:00
..
security.md feat(server): Add authentication & authorization system 2026-01-28 07:37:44 -06:00
settings-architecture.md docs: Sprint 1150 Settings Hardening documentation update 2026-01-28 04:24:23 -06:00
sprint-1.md Move sprint 1-4 docs to docs/ folder for consistency 2026-01-26 06:36:10 -06:00
sprint-2.md Move sprint 1-4 docs to docs/ folder for consistency 2026-01-26 06:36:10 -06:00
sprint-3.md Move sprint 1-4 docs to docs/ folder for consistency 2026-01-26 06:36:10 -06:00
sprint-4.md Move sprint 1-4 docs to docs/ folder for consistency 2026-01-26 06:36:10 -06:00
sprint-5.md docs: add type fix commit to sprint-5 log 2026-01-26 04:39:25 -06:00
sprint-6.md feat(US-605): activity log 2026-01-26 05:03:26 -06:00
sprint-7.md US-711: Add running indicator on task cards - Sprint 7 complete! 🎉 2026-01-26 06:28:41 -06:00
sprint-8.md Add Sprint 8 docs + telemetry data 2026-01-26 15:50:23 -06:00
sprint-9.md docs: Update sprint-9 status to Complete (8/9 stories) 2026-01-27 20:33:48 -06:00
sprint-10.md docs: expand Sprint 10 with agent comparison, failure alerts, daily digest, budget tracking, velocity 2026-01-27 20:34:42 -06:00
sprint-12.md docs: Sprint 12-14 planning — LAN access, status indicator, metrics refactoring 2026-01-28 02:06:58 -06:00
sprint-13.md docs: Sprint 12-14 planning — LAN access, status indicator, metrics refactoring 2026-01-28 02:06:58 -06:00
sprint-14.md docs: Sprint 12-14 planning — LAN access, status indicator, metrics refactoring 2026-01-28 02:06:58 -06:00