donghyeon-ka a289aa2799 docs: define AP1 Google federation profile

2026-07-25 16:39:53 +09:00

..

audit-keycloak-branches.sh

docs: add 39-branch Keycloak governance index

2026-07-25 15:26:26 +09:00

configure-broker-user-profile.sh

feat: map upstream Google identity claims

2026-07-25 16:24:24 +09:00

configure-google-idp.sh

feat: map broker claims to realm roles

2026-07-25 16:26:59 +09:00

export-realm.sh

feat: add shared realm and pattern clients

2026-07-25 13:21:36 +09:00

set-first-broker-login-mode.sh

test: reproduce and block unsafe broker auto-link

2026-07-25 16:17:54 +09:00

validate-realm.py

feat(ap1): enforce resource audience

2026-07-25 14:11:28 +09:00

verify-account-linking-sub-vs-email.sh

test: verify broker identity uses subject not email

2026-07-25 16:28:00 +09:00

verify-federation-spa-zero-change.sh

test: verify federation keeps the AP1 contract

2026-07-25 16:39:01 +09:00

verify-first-broker-login.sh

test: reproduce and block unsafe broker auto-link

2026-07-25 16:17:54 +09:00

verify-google-broker-config.sh

feat: add Google broker configuration profiles

2026-07-25 15:30:47 +09:00

verify-google-claim-mapping.sh

feat: map upstream Google identity claims

2026-07-25 16:24:24 +09:00

verify-google-claim-to-role.sh

feat: map broker claims to realm roles

2026-07-25 16:26:59 +09:00

verify-google-redirect-uri-policy.sh

docs: define exact Google redirect URI policy

2026-07-25 16:28:53 +09:00

verify-https-termination-config.sh

feat: add validated HTTPS termination profiles

2026-07-25 16:30:25 +09:00

verify-internal-spa-google-contract.sh

docs: define AP1 Google federation profile

2026-07-25 16:39:53 +09:00

verify-internal-spa-no-google-contract.sh

docs: define AP1 local identity profile

2026-07-25 16:39:31 +09:00

verify-pattern1.sh

test(ap1): reproduce issuer mismatch

2026-07-25 14:12:23 +09:00

verify-pkce-flow-stages.sh

test: codify SPA PKCE flow stages

2026-07-25 16:36:43 +09:00

verify-public-tunnel-config.sh

feat: add validated named tunnel profile

2026-07-25 16:31:13 +09:00

verify-realm.sh

feat: add shared realm and pattern clients

2026-07-25 13:21:36 +09:00

verify-refresh-token-rotation-contract.sh

test: isolate refresh token rotation contract

2026-07-25 16:37:07 +09:00

verify-reverse-proxy-headers.sh

feat: define trusted reverse proxy header contract

2026-07-25 16:29:32 +09:00

verify-spring-role-mapping.sh

feat: map Keycloak realm roles to Spring RBAC

2026-07-25 16:35:28 +09:00

verify-stack.sh

feat: add shared Keycloak compose baseline

2026-07-25 13:14:58 +09:00