 DongHyeonka
|
64175266df
|
chore: 메타데이터 gitignore
|
2026-09-02 14:42:50 +09:00 |
|
|
donghyeon-ka
|
bb8fd9333d
|
merge: single-EC2 Google federation deployment
|
2026-07-25 16:41:27 +09:00 |
|
|
donghyeon-ka
|
42957abfed
|
docs: define single-EC2 Google federation deployment
|
2026-07-25 16:41:27 +09:00 |
|
|
donghyeon-ka
|
5026b79fc0
|
merge: single-EC2 local identity deployment
|
2026-07-25 16:41:03 +09:00 |
|
|
donghyeon-ka
|
b42db5e93b
|
docs: define single-EC2 local identity deployment
|
2026-07-25 16:41:03 +09:00 |
|
|
donghyeon-ka
|
aee01c9e90
|
merge: three-leg trust chain contract
|
2026-07-25 16:40:19 +09:00 |
|
|
donghyeon-ka
|
4a55ee71a9
|
test: codify the three-leg trust chain
|
2026-07-25 16:40:19 +09:00 |
|
|
donghyeon-ka
|
1341645cf5
|
merge: AP1 Google federation profile
|
2026-07-25 16:39:53 +09:00 |
|
|
donghyeon-ka
|
a289aa2799
|
docs: define AP1 Google federation profile
|
2026-07-25 16:39:53 +09:00 |
|
|
donghyeon-ka
|
a63c901407
|
merge: AP1 local identity profile
|
2026-07-25 16:39:31 +09:00 |
|
|
donghyeon-ka
|
e49f270a0e
|
docs: define AP1 local identity profile
|
2026-07-25 16:39:31 +09:00 |
|
|
donghyeon-ka
|
34bcd89bd0
|
merge: zero-change SPA federation contract
|
2026-07-25 16:39:01 +09:00 |
|
|
donghyeon-ka
|
49863532e1
|
test: verify federation keeps the AP1 contract
|
2026-07-25 16:39:01 +09:00 |
|
|
donghyeon-ka
|
c15aeabb87
|
merge: SPA account-linking UX contract
|
2026-07-25 16:38:01 +09:00 |
|
|
donghyeon-ka
|
eec9feae5c
|
feat: add signed SPA account-linking helper
|
2026-07-25 16:38:01 +09:00 |
|
|
donghyeon-ka
|
32450c35ab
|
merge: refresh token rotation contract
|
2026-07-25 16:37:07 +09:00 |
|
|
donghyeon-ka
|
b1c2d05ae9
|
test: isolate refresh token rotation contract
|
2026-07-25 16:37:07 +09:00 |
|
|
donghyeon-ka
|
7916455ce5
|
merge: PKCE flow stage contract
|
2026-07-25 16:36:43 +09:00 |
|
|
donghyeon-ka
|
55a99b8147
|
test: codify SPA PKCE flow stages
|
2026-07-25 16:36:43 +09:00 |
|
|
donghyeon-ka
|
2765f5d109
|
merge: Spring resource server role mapping
|
2026-07-25 16:35:28 +09:00 |
|
|
donghyeon-ka
|
3e3de6c4c3
|
feat: map Keycloak realm roles to Spring RBAC
|
2026-07-25 16:35:28 +09:00 |
|
|
donghyeon-ka
|
f566ed192c
|
merge: shared broker and deployment contracts
|
2026-07-25 16:31:53 +09:00 |
|
|
donghyeon-ka
|
c07593c471
|
merge: four-pattern tradeoff matrix
|
2026-07-25 16:31:44 +09:00 |
|
|
donghyeon-ka
|
d01a60964a
|
docs: compare four authentication patterns
|
2026-07-25 16:31:44 +09:00 |
|
|
donghyeon-ka
|
5d7544256a
|
merge: public domain tunnel profile
|
2026-07-25 16:31:13 +09:00 |
|
|
donghyeon-ka
|
eacc0e86c9
|
feat: add validated named tunnel profile
|
2026-07-25 16:31:13 +09:00 |
|
|
donghyeon-ka
|
ac912cb354
|
merge: HTTPS termination profiles
|
2026-07-25 16:30:25 +09:00 |
|
|
donghyeon-ka
|
e4cee2a06d
|
feat: add validated HTTPS termination profiles
|
2026-07-25 16:30:25 +09:00 |
|
|
donghyeon-ka
|
006b405ad5
|
merge: reverse proxy header contract
|
2026-07-25 16:29:32 +09:00 |
|
|
donghyeon-ka
|
8539d1bf5b
|
feat: define trusted reverse proxy header contract
|
2026-07-25 16:29:32 +09:00 |
|
|
donghyeon-ka
|
3473875d9a
|
merge: Google redirect URI policy
|
2026-07-25 16:28:53 +09:00 |
|
|
donghyeon-ka
|
f077e5038e
|
docs: define exact Google redirect URI policy
|
2026-07-25 16:28:53 +09:00 |
|
|
donghyeon-ka
|
e4eb7e54f7
|
merge: federated subject identity contract
|
2026-07-25 16:28:00 +09:00 |
|
|
donghyeon-ka
|
bdde0feb86
|
test: verify broker identity uses subject not email
|
2026-07-25 16:28:00 +09:00 |
|
|
donghyeon-ka
|
3da8e609ae
|
merge: broker claim-to-role mapping
|
2026-07-25 16:26:59 +09:00 |
|
|
donghyeon-ka
|
ed064473dc
|
feat: map broker claims to realm roles
|
2026-07-25 16:26:59 +09:00 |
|
|
donghyeon-ka
|
549f5dcf3e
|
merge: shared Google claim mapping
|
2026-07-25 16:24:30 +09:00 |
|
|
donghyeon-ka
|
a84f7d50a1
|
merge: Google claim attribute mapping
|
2026-07-25 16:24:24 +09:00 |
|
|
donghyeon-ka
|
98b07b4fdf
|
feat: map upstream Google identity claims
|
2026-07-25 16:24:24 +09:00 |
|
|
donghyeon-ka
|
6fc2e77b7d
|
merge: shared Google brokering baseline
|
2026-07-25 16:18:00 +09:00 |
|
|
donghyeon-ka
|
98566a713d
|
merge: hardened First Broker Login flow
|
2026-07-25 16:17:54 +09:00 |
|
|
donghyeon-ka
|
aeb783e592
|
test: reproduce and block unsafe broker auto-link
|
2026-07-25 16:17:54 +09:00 |
|
|
donghyeon-ka
|
3bbbaf5230
|
merge: Google broker configuration profiles
|
2026-07-25 15:30:47 +09:00 |
|
|
donghyeon-ka
|
2ee4b2af1c
|
feat: add Google broker configuration profiles
|
2026-07-25 15:30:47 +09:00 |
|
|
donghyeon-ka
|
030ae94be3
|
merge: Keycloak branch governance index
|
2026-07-25 15:26:26 +09:00 |
|
|
donghyeon-ka
|
728e737dc8
|
docs: add 39-branch Keycloak governance index
|
2026-07-25 15:26:26 +09:00 |
|
|
donghyeon-ka
|
b601908ab9
|
merge(ap1): refresh rotation and logout
|
2026-07-25 14:16:17 +09:00 |
|
|
donghyeon-ka
|
2ff6d2bfda
|
test(ap1): verify refresh rotation and logout
|
2026-07-25 14:16:17 +09:00 |
|
|
donghyeon-ka
|
7f47478fb8
|
merge(ap1): token storage tradeoff
|
2026-07-25 14:14:02 +09:00 |
|
|
donghyeon-ka
|
6f1ccdd978
|
test(ap1): demonstrate token storage tradeoff
|
2026-07-25 14:14:02 +09:00 |
|