dtoro f6a699469d oidc: authenticate SPA users via Authentik ...

- Add OIDC proxy endpoints (GET config, POST token) to API server
- Implement PKCE Authorization Code flow in SPA
- Enable Authentik login tab in Config page
- Handle callback + auto-refresh + session restore
- Add restart: unless-stopped to all persistent services
- Configure OIDC issuer + client_id in docker-compose

2026-07-13 22:17:31 +02:00

..

actuator

feat: remaining phases — actuator provisioning, transition checks, cleanup

2026-07-08 00:40:53 +02:00

checkdefaults

fix: disk_usage_check.sh handles inode '-' (vfat/efi), checkdefaults sets target_id

2026-07-08 21:58:44 +02:00

config

oidc: authenticate SPA users via Authentik

2026-07-13 22:17:31 +02:00

db

onboarding: auto-create default checks when entity is created

2026-07-08 21:53:50 +02:00

domain

phase 2 (part 4): SSE stream via io.Pipe, OIDC JWT auth middleware

2026-07-07 09:40:11 +02:00

httpapi

oidc: authenticate SPA users via Authentik

2026-07-13 22:17:31 +02:00

knowledge

fix: PG array format for tags, entity slug prefixes, archive path handling

2026-07-07 20:37:17 +02:00

learning

phase 3 review: fix broken error classification, stub checks, wasted uuid, token idempotency, dead code

2026-07-07 15:27:31 +02:00

mcp

feat(mcp): expose full knowledge content to the agent, not just snippets

2026-07-13 10:51:37 +02:00

notifier

complete MCP tool surface — Matrix approval webhook loop + token verification

2026-07-08 11:02:06 +02:00

observability

phase 2 (part 2): sqlc queries, audit/event helpers, event NOTIFY trigger

2026-07-07 08:49:59 +02:00

ontology

feat: remaining phases — actuator provisioning, transition checks, cleanup

2026-07-08 00:40:53 +02:00

policy

feat: assent window + compound read-only classification + continue-after-approval

2026-07-10 13:10:57 +02:00

safego

fix(agent): panic recovery on every background goroutine (B1+B2)

2026-07-11 20:05:19 +02:00

scheduler

fix: scheduler wrote health/metrics/events to probe entities, not targets

2026-07-09 00:26:04 +02:00

secrets

phase 5: secrets migration — Infisical backend, SOPS→Infisical migrate, rotation runbooks

2026-07-07 17:27:21 +02:00