 donghyeon-ka
|
42957abfed
|
docs: define single-EC2 Google federation deployment
|
2026-07-25 16:41:27 +09:00 |
|
|
donghyeon-ka
|
b42db5e93b
|
docs: define single-EC2 local identity deployment
|
2026-07-25 16:41:03 +09:00 |
|
|
donghyeon-ka
|
4a55ee71a9
|
test: codify the three-leg trust chain
|
2026-07-25 16:40:19 +09:00 |
|
|
donghyeon-ka
|
a289aa2799
|
docs: define AP1 Google federation profile
|
2026-07-25 16:39:53 +09:00 |
|
|
donghyeon-ka
|
e49f270a0e
|
docs: define AP1 local identity profile
|
2026-07-25 16:39:31 +09:00 |
|
|
donghyeon-ka
|
49863532e1
|
test: verify federation keeps the AP1 contract
|
2026-07-25 16:39:01 +09:00 |
|
|
donghyeon-ka
|
eec9feae5c
|
feat: add signed SPA account-linking helper
|
2026-07-25 16:38:01 +09:00 |
|
|
donghyeon-ka
|
b1c2d05ae9
|
test: isolate refresh token rotation contract
|
2026-07-25 16:37:07 +09:00 |
|
|
donghyeon-ka
|
55a99b8147
|
test: codify SPA PKCE flow stages
|
2026-07-25 16:36:43 +09:00 |
|
|
donghyeon-ka
|
3e3de6c4c3
|
feat: map Keycloak realm roles to Spring RBAC
|
2026-07-25 16:35:28 +09:00 |
|
|
donghyeon-ka
|
f566ed192c
|
merge: shared broker and deployment contracts
|
2026-07-25 16:31:53 +09:00 |
|
|
donghyeon-ka
|
d01a60964a
|
docs: compare four authentication patterns
|
2026-07-25 16:31:44 +09:00 |
|
|
donghyeon-ka
|
eacc0e86c9
|
feat: add validated named tunnel profile
|
2026-07-25 16:31:13 +09:00 |
|
|
donghyeon-ka
|
e4cee2a06d
|
feat: add validated HTTPS termination profiles
|
2026-07-25 16:30:25 +09:00 |
|
|
donghyeon-ka
|
8539d1bf5b
|
feat: define trusted reverse proxy header contract
|
2026-07-25 16:29:32 +09:00 |
|
|
donghyeon-ka
|
f077e5038e
|
docs: define exact Google redirect URI policy
|
2026-07-25 16:28:53 +09:00 |
|
|
donghyeon-ka
|
bdde0feb86
|
test: verify broker identity uses subject not email
|
2026-07-25 16:28:00 +09:00 |
|
|
donghyeon-ka
|
ed064473dc
|
feat: map broker claims to realm roles
|
2026-07-25 16:26:59 +09:00 |
|
|
donghyeon-ka
|
549f5dcf3e
|
merge: shared Google claim mapping
|
2026-07-25 16:24:30 +09:00 |
|
|
donghyeon-ka
|
98b07b4fdf
|
feat: map upstream Google identity claims
|
2026-07-25 16:24:24 +09:00 |
|
|
donghyeon-ka
|
6fc2e77b7d
|
merge: shared Google brokering baseline
|
2026-07-25 16:18:00 +09:00 |
|
|
donghyeon-ka
|
aeb783e592
|
test: reproduce and block unsafe broker auto-link
|
2026-07-25 16:17:54 +09:00 |
|
|
donghyeon-ka
|
2ee4b2af1c
|
feat: add Google broker configuration profiles
|
2026-07-25 15:30:47 +09:00 |
|
|
donghyeon-ka
|
728e737dc8
|
docs: add 39-branch Keycloak governance index
|
2026-07-25 15:26:26 +09:00 |
|
|
donghyeon-ka
|
2ff6d2bfda
|
test(ap1): verify refresh rotation and logout
|
2026-07-25 14:16:17 +09:00 |
|
|
donghyeon-ka
|
6f1ccdd978
|
test(ap1): demonstrate token storage tradeoff
|
2026-07-25 14:14:02 +09:00 |
|