donghyeon-ka 49863532e1 test: verify federation keeps the AP1 contract

2026-07-25 16:39:01 +09:00

..

account-linking-spa-ux.md

feat: add signed SPA account-linking helper

2026-07-25 16:38:01 +09:00

account-linking-sub-vs-email.md

test: verify broker identity uses subject not email

2026-07-25 16:28:00 +09:00

ap1-refresh-logout.md

test(ap1): verify refresh rotation and logout

2026-07-25 14:16:17 +09:00

ap1-token-storage.md

test(ap1): demonstrate token storage tradeoff

2026-07-25 14:14:02 +09:00

federation-spa-zero-change.md

test: verify federation keeps the AP1 contract

2026-07-25 16:39:01 +09:00

first-broker-login-security.md

test: reproduce and block unsafe broker auto-link

2026-07-25 16:17:54 +09:00

four-pattern-tradeoff-matrix.md

docs: compare four authentication patterns

2026-07-25 16:31:44 +09:00

google-claim-mapping.md

feat: map upstream Google identity claims

2026-07-25 16:24:24 +09:00

google-claim-to-role.md

feat: map broker claims to realm roles

2026-07-25 16:26:59 +09:00

google-idp-brokering.md

feat: add Google broker configuration profiles

2026-07-25 15:30:47 +09:00

google-redirect-uri-policy.md

docs: define exact Google redirect URI policy

2026-07-25 16:28:53 +09:00

https-termination.md

feat: add validated HTTPS termination profiles

2026-07-25 16:30:25 +09:00

keycloak-branch-index.md

docs: add 39-branch Keycloak governance index

2026-07-25 15:26:26 +09:00

keycloak-branch-manifest.tsv

docs: add 39-branch Keycloak governance index

2026-07-25 15:26:26 +09:00

pkce-flow-stages.md

test: codify SPA PKCE flow stages

2026-07-25 16:36:43 +09:00

public-domain-tunneling.md

feat: add validated named tunnel profile

2026-07-25 16:31:13 +09:00

refresh-token-rotation.md

test: isolate refresh token rotation contract

2026-07-25 16:37:07 +09:00

reverse-proxy-headers.md

feat: define trusted reverse proxy header contract

2026-07-25 16:29:32 +09:00

spring-role-mapping.md

feat: map Keycloak realm roles to Spring RBAC

2026-07-25 16:35:28 +09:00