Commit Graph
14 Commits
Author SHA1 Message Date
DenozordecandCursor cc38bf06f8 feat(admin): журналы входов и изменений с IP/UA и сессиями
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m57s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Разделены экраны «Входы» и «Изменения»; логин пишет IP/UA и last_login_ip;
SSO handoff и revoke refresh-сессий; улучшены audit-карточки.

Co-authored-by: Cursor <[email protected]>
2026-07-31 03:12:39 +07:00
DenozordecandCursor 8b1203f5e9 fix(db): индексы audit source_app/event_id только после ALTER
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m59s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
На существующей audit_log CREATE INDEX по source_app падал до добавления колонки — контейнер crash-loop / Traefik 404.

Co-authored-by: Cursor <[email protected]>
2026-07-21 13:36:10 +07:00
DenozordecandCursor 57e34ff5e9 feat(admin): ingest аудита из apps и users 1:1 с Sheet журнала
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m46s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Добавлен POST /api/v1/ingest/audit, фильтры source_app/user_id, last_login_at; таблица пользователей по solution-users-1 с журналом в Sheet.

Co-authored-by: Cursor <[email protected]>
2026-07-21 13:24:28 +07:00
DenozordecandCursor 26fc8253c3 feat(admin): журнал аудита с ротацией и апгрейд таблицы пользователей
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m37s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Добавлен audit log (solution-users-6) с retention N дней и hourly purge; таблица пользователей приведена к DNA solution-users-1 (Filters, avatar, sorting).

Co-authored-by: Cursor <[email protected]>
2026-07-21 04:20:47 +07:00
DenozordecandCursor 9b4c7b8b9d feat(auth): добавить приложение fw для EvoFirewall
Build and Push Auth Portal Docker Image / build-and-push (push) Failing after 1m15s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Каталог permissions fw:*, app switcher и docs; убран bgp:firewall после cutover.

Co-authored-by: Cursor <[email protected]>
2026-07-20 19:50:54 +07:00
Denozordec 09ed7f4dc4 feat(auth): refactor authentication routes and enhance JWT handling
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m49s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
- Removed unused permission and app retrieval logic from the login process.
- Introduced a new endpoint for reissuing access tokens to handle role changes and account switches.
- Updated JWT payload handling to improve clarity and maintainability.
- Enhanced the readJwtPayload function for better decoding of JWT claims.
2026-07-19 02:22:23 +07:00
Denozordec bb17ad6f4d feat(auth): enhance JWT claims and app switcher configuration
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m44s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
- Added support for optional tenant IDs in JWT claims for user permissions.
- Updated auth routes to include tenant information in the JWT payload.
- Enhanced app switcher configuration to handle tenant IDs without exposing them publicly.
- Improved documentation for EvoBGP tenant ID integration and its usage in JWT.
2026-07-19 01:00:37 +07:00
Denozordec 21d6603b57 feat(auth): integrate normalizePermissionKeys for consistent permission handling
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m54s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
- Updated auth, admin, and auth-guards routes to utilize normalizePermissionKeys for permissions.
- Enhanced permission mapping to ensure legacy keys are correctly transformed to current catalog keys.
- Improved overall permission validation and user access management across the application.
2026-07-19 00:19:18 +07:00
Denozordec cfbe1fceda docs(README): добавлена ссылка на интеграцию с EvoBGP в документацию; обновлено описание приложения BGP и расширен каталог разрешений
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 2m56s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
2026-07-18 23:24:00 +07:00
DenozordecandCursor 0fa4b7adea feat(app-switcher): централизовать ссылки приложений в portal settings
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m49s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Публичный GET и admin PUT/UI /admin/apps; каталог и chrome читают URL из store.

Co-authored-by: Cursor <[email protected]>
2026-07-18 20:59:01 +07:00
DenozordecandCursor c23eb5ead0 fix(auth): не отдавать SSO с просроченным JWT и не бить /me
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m38s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
getToken чистит expired; при плохом return_to остаёмся на login без /me.

Co-authored-by: Cursor <[email protected]>
2026-07-18 16:08:50 +07:00
DenozordecandCursor e2c45cf0fa feat(vps): добавить permission vps:spaces:admin и docs Spaces
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 1m42s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Каталог RBAC и секция Spaces в integrate-vps-tracker для multi-user пространств.

Co-authored-by: Cursor <[email protected]>
2026-07-18 15:42:54 +07:00
DenozordecandCursor 1cc58977fd feat(auth): allowlist private для LAN return_to
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 3m37s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
Co-authored-by: Cursor <[email protected]>
2026-07-18 13:49:37 +07:00
Denozordec bac95bdb2e First Commit
Build and Push Auth Portal Docker Image / build-and-push (push) Successful in 5m26s
Build and Push Auth Portal Docker Image / create-release (push) Skipped
2026-07-18 13:27:37 +07:00