 donghyeon-ka
|
b1c2d05ae9
|
test: isolate refresh token rotation contract
|
2026-07-25 16:37:07 +09:00 |
|
|
donghyeon-ka
|
7916455ce5
|
merge: PKCE flow stage contract
|
2026-07-25 16:36:43 +09:00 |
|
|
donghyeon-ka
|
55a99b8147
|
test: codify SPA PKCE flow stages
|
2026-07-25 16:36:43 +09:00 |
|
|
donghyeon-ka
|
2765f5d109
|
merge: Spring resource server role mapping
|
2026-07-25 16:35:28 +09:00 |
|
|
donghyeon-ka
|
3e3de6c4c3
|
feat: map Keycloak realm roles to Spring RBAC
|
2026-07-25 16:35:28 +09:00 |
|
|
donghyeon-ka
|
f566ed192c
|
merge: shared broker and deployment contracts
|
2026-07-25 16:31:53 +09:00 |
|
|
donghyeon-ka
|
c07593c471
|
merge: four-pattern tradeoff matrix
|
2026-07-25 16:31:44 +09:00 |
|
|
donghyeon-ka
|
d01a60964a
|
docs: compare four authentication patterns
|
2026-07-25 16:31:44 +09:00 |
|
|
donghyeon-ka
|
5d7544256a
|
merge: public domain tunnel profile
|
2026-07-25 16:31:13 +09:00 |
|
|
donghyeon-ka
|
eacc0e86c9
|
feat: add validated named tunnel profile
|
2026-07-25 16:31:13 +09:00 |
|
|
donghyeon-ka
|
ac912cb354
|
merge: HTTPS termination profiles
|
2026-07-25 16:30:25 +09:00 |
|
|
donghyeon-ka
|
e4cee2a06d
|
feat: add validated HTTPS termination profiles
|
2026-07-25 16:30:25 +09:00 |
|
|
donghyeon-ka
|
006b405ad5
|
merge: reverse proxy header contract
|
2026-07-25 16:29:32 +09:00 |
|
|
donghyeon-ka
|
8539d1bf5b
|
feat: define trusted reverse proxy header contract
|
2026-07-25 16:29:32 +09:00 |
|
|
donghyeon-ka
|
3473875d9a
|
merge: Google redirect URI policy
|
2026-07-25 16:28:53 +09:00 |
|
|
donghyeon-ka
|
f077e5038e
|
docs: define exact Google redirect URI policy
|
2026-07-25 16:28:53 +09:00 |
|
|
donghyeon-ka
|
e4eb7e54f7
|
merge: federated subject identity contract
|
2026-07-25 16:28:00 +09:00 |
|
|
donghyeon-ka
|
bdde0feb86
|
test: verify broker identity uses subject not email
|
2026-07-25 16:28:00 +09:00 |
|
|
donghyeon-ka
|
3da8e609ae
|
merge: broker claim-to-role mapping
|
2026-07-25 16:26:59 +09:00 |
|
|
donghyeon-ka
|
ed064473dc
|
feat: map broker claims to realm roles
|
2026-07-25 16:26:59 +09:00 |
|
|
donghyeon-ka
|
549f5dcf3e
|
merge: shared Google claim mapping
|
2026-07-25 16:24:30 +09:00 |
|
|
donghyeon-ka
|
a84f7d50a1
|
merge: Google claim attribute mapping
|
2026-07-25 16:24:24 +09:00 |
|
|
donghyeon-ka
|
98b07b4fdf
|
feat: map upstream Google identity claims
|
2026-07-25 16:24:24 +09:00 |
|
|
donghyeon-ka
|
6fc2e77b7d
|
merge: shared Google brokering baseline
|
2026-07-25 16:18:00 +09:00 |
|
|
donghyeon-ka
|
98566a713d
|
merge: hardened First Broker Login flow
|
2026-07-25 16:17:54 +09:00 |
|
|
donghyeon-ka
|
aeb783e592
|
test: reproduce and block unsafe broker auto-link
|
2026-07-25 16:17:54 +09:00 |
|
|
donghyeon-ka
|
3bbbaf5230
|
merge: Google broker configuration profiles
|
2026-07-25 15:30:47 +09:00 |
|
|
donghyeon-ka
|
2ee4b2af1c
|
feat: add Google broker configuration profiles
|
2026-07-25 15:30:47 +09:00 |
|
|
donghyeon-ka
|
030ae94be3
|
merge: Keycloak branch governance index
|
2026-07-25 15:26:26 +09:00 |
|
|
donghyeon-ka
|
728e737dc8
|
docs: add 39-branch Keycloak governance index
|
2026-07-25 15:26:26 +09:00 |
|
|
donghyeon-ka
|
b601908ab9
|
merge(ap1): refresh rotation and logout
|
2026-07-25 14:16:17 +09:00 |
|
|
donghyeon-ka
|
2ff6d2bfda
|
test(ap1): verify refresh rotation and logout
|
2026-07-25 14:16:17 +09:00 |
|
|
donghyeon-ka
|
7f47478fb8
|
merge(ap1): token storage tradeoff
|
2026-07-25 14:14:02 +09:00 |
|
|
donghyeon-ka
|
6f1ccdd978
|
test(ap1): demonstrate token storage tradeoff
|
2026-07-25 14:14:02 +09:00 |
|
|
donghyeon-ka
|
8961671a1c
|
merge(ap1): issuer mismatch diagnostic
|
2026-07-25 14:12:23 +09:00 |
|
|
donghyeon-ka
|
5a8bc9b145
|
test(ap1): reproduce issuer mismatch
|
2026-07-25 14:12:23 +09:00 |
|
|
donghyeon-ka
|
994bef0edd
|
merge(ap1): resource audience validation
|
2026-07-25 14:11:31 +09:00 |
|
|
donghyeon-ka
|
84a9ca3e8f
|
feat(ap1): enforce resource audience
|
2026-07-25 14:11:28 +09:00 |
|
|
donghyeon-ka
|
c048d00994
|
merge(ap1): vanilla SPA PKCE login
|
2026-07-25 14:09:09 +09:00 |
|
|
donghyeon-ka
|
c1fae6137c
|
feat(ap1): add vanilla SPA PKCE login
|
2026-07-25 14:09:03 +09:00 |
|
|
donghyeon-ka
|
e2fba41f56
|
merge: shared Keycloak realm baseline
|
2026-07-25 13:21:42 +09:00 |
|
|
donghyeon-ka
|
998eada6f5
|
feat: add shared realm and pattern clients
|
2026-07-25 13:21:36 +09:00 |
|
|
donghyeon-ka
|
5ddb97d3a1
|
merge: shared Keycloak compose baseline
|
2026-07-25 13:14:58 +09:00 |
|
|
donghyeon-ka
|
f47dea3e24
|
feat: add shared Keycloak compose baseline
|
2026-07-25 13:14:58 +09:00 |
|
 donghyeon.kang
|
1eeff83d0b
|
Initial commit
|
2026-07-23 04:24:38 +00:00 |
|