 donghyeon-ka
|
e49f270a0e
|
docs: define AP1 local identity profile
|
2026-07-25 16:39:31 +09:00 |
|
|
donghyeon-ka
|
49863532e1
|
test: verify federation keeps the AP1 contract
|
2026-07-25 16:39:01 +09:00 |
|
|
donghyeon-ka
|
b1c2d05ae9
|
test: isolate refresh token rotation contract
|
2026-07-25 16:37:07 +09:00 |
|
|
donghyeon-ka
|
55a99b8147
|
test: codify SPA PKCE flow stages
|
2026-07-25 16:36:43 +09:00 |
|
|
donghyeon-ka
|
3e3de6c4c3
|
feat: map Keycloak realm roles to Spring RBAC
|
2026-07-25 16:35:28 +09:00 |
|
|
donghyeon-ka
|
f566ed192c
|
merge: shared broker and deployment contracts
|
2026-07-25 16:31:53 +09:00 |
|
|
donghyeon-ka
|
eacc0e86c9
|
feat: add validated named tunnel profile
|
2026-07-25 16:31:13 +09:00 |
|
|
donghyeon-ka
|
e4cee2a06d
|
feat: add validated HTTPS termination profiles
|
2026-07-25 16:30:25 +09:00 |
|
|
donghyeon-ka
|
8539d1bf5b
|
feat: define trusted reverse proxy header contract
|
2026-07-25 16:29:32 +09:00 |
|
|
donghyeon-ka
|
f077e5038e
|
docs: define exact Google redirect URI policy
|
2026-07-25 16:28:53 +09:00 |
|
|
donghyeon-ka
|
bdde0feb86
|
test: verify broker identity uses subject not email
|
2026-07-25 16:28:00 +09:00 |
|
|
donghyeon-ka
|
ed064473dc
|
feat: map broker claims to realm roles
|
2026-07-25 16:26:59 +09:00 |
|
|
donghyeon-ka
|
549f5dcf3e
|
merge: shared Google claim mapping
|
2026-07-25 16:24:30 +09:00 |
|
|
donghyeon-ka
|
98b07b4fdf
|
feat: map upstream Google identity claims
|
2026-07-25 16:24:24 +09:00 |
|
|
donghyeon-ka
|
6fc2e77b7d
|
merge: shared Google brokering baseline
|
2026-07-25 16:18:00 +09:00 |
|
|
donghyeon-ka
|
aeb783e592
|
test: reproduce and block unsafe broker auto-link
|
2026-07-25 16:17:54 +09:00 |
|
|
donghyeon-ka
|
2ee4b2af1c
|
feat: add Google broker configuration profiles
|
2026-07-25 15:30:47 +09:00 |
|
|
donghyeon-ka
|
728e737dc8
|
docs: add 39-branch Keycloak governance index
|
2026-07-25 15:26:26 +09:00 |
|
|
donghyeon-ka
|
5a8bc9b145
|
test(ap1): reproduce issuer mismatch
|
2026-07-25 14:12:23 +09:00 |
|
|
donghyeon-ka
|
84a9ca3e8f
|
feat(ap1): enforce resource audience
|
2026-07-25 14:11:28 +09:00 |
|
|
donghyeon-ka
|
c1fae6137c
|
feat(ap1): add vanilla SPA PKCE login
|
2026-07-25 14:09:03 +09:00 |
|
|
donghyeon-ka
|
998eada6f5
|
feat: add shared realm and pattern clients
|
2026-07-25 13:21:36 +09:00 |
|
|
donghyeon-ka
|
f47dea3e24
|
feat: add shared Keycloak compose baseline
|
2026-07-25 13:14:58 +09:00 |
|