1
0
forked from baron/baron-sso
Commit Graph

118 Commits

Author SHA1 Message Date
d3a82d1653 feat: allow regular users to view their own tenant's org chart
Changes the /users endpoint to allow RoleUser access and securely restricts the returned data to only users within their affiliated tenants. Removes the unnecessary back button from the Org Chart view since it's now a top-level nav item.
2026-04-13 10:47:56 +09:00
4293013d4f chore(i18n): sync adminfront locales with new keys
- Adminfront 화면에 표시될 한국어/영어 문구(테넌트 검색, 총 n개 로그 등) 추가
2026-04-10 14:49:19 +09:00
5a84e9f6cc Merge branch 'dev' into fix/rebac-env-sync-issue 2026-04-10 13:52:07 +09:00
5211842d47 조직도 기능 추가 2026-04-10 11:38:47 +09:00
332ac9c0d8 feat: dynamic frontend tenant dropdown 2026-04-06 16:56:33 +09:00
kyy
1b8dc2c4ab dev 브런치 병합 후 code check 2026-04-06 16:03:49 +09:00
kyy
a2f2b2dd71 사용자 활성 세션 조회·종료 API 추가 2026-04-06 15:02:41 +09:00
583755c189 fix: improve keto sync reliability and initial rebac permissions for super admin 2026-04-06 10:10:27 +09:00
b582c82c6f feat: implement multi-identifier architecture (Issue #496)
- Database: Add user_login_ids table for 1:N identifier mapping and remove legacy login_id column
- Kratos: Update identity schema to use custom_login_ids array instead of a single id trait
- Backend: Implement syncCustomLoginIDs to collect isLoginId fields across tenant schemas
- Backend: Add backtracking logic to auto-assign session tenant based on used login identifier
- Backend: Add 409 Conflict exception handling for Create/Update operations
- AdminFront: Refactor UserDetailPage to a tabbed grid layout (Info, Tenants, Security)
- AdminFront: Show '로그인 ID' badge on tenant schema fields used for authentication
- UserFront: Remove legacy optional 'Login ID' input from signup flow
- Tests: Add multi-identifier repository tests and update handler tests
2026-04-02 16:07:33 +09:00
Lectom C Han
71a006cd7b fix(headless-login): honor public base url for audience checks
- resolve headless audience against BACKEND_PUBLIC_URL first
- keep forwarded header support for https absolute audiences
- add regression tests for https success and http mismatch rejection
- write BACKEND_PUBLIC_URL into staging workflow env generation
2026-04-01 21:05:41 +09:00
Lectom C Han
4b0fbdde98 레포 업데이트 2026-04-01 20:32:09 +09:00
Lectom C Han
9facd24a00 feat(headless-login): add jwks cache visibility and refresh flow
- replace inline headless jwks support with jwksUri-only validation
- add cached jwks refresh worker, manual refresh/revoke endpoints, and parsed key summaries
- expose allowed algorithms and key previews in DevFront with regression coverage
2026-04-01 18:33:22 +09:00
kyy
68114eea66 비밀번호 재설정 중복 완료 요청 문제 수정 2026-03-31 11:51:21 +09:00
Lectom C Han
b4342b355f feat(auth): add trusted rp headless login flows 2026-03-30 21:46:15 +09:00
75cc6737bd feat: add robust login ID collision prevention and UI validation (#440)
- Add `ValidateLoginID` to enforce ID collision and security rules (prevents phone number collision, email format usage, and reserved words).
- Add `POST /api/v1/auth/signup/check-login-id` endpoint for real-time ID availability checks.
- Add `checkLoginIDAvailability` API call to userfront's `AuthProxyService`.
- Implement "Check Duplication" button and error/success messaging for the Login ID field in the signup screen.
- Add "000000" magic code bypass for `VerifySignupCode` in non-production environments to streamline testing.
2026-03-27 11:19:28 +09:00
a4f283e4e6 #445 #430 #426 #427 2026-03-24 14:22:05 +09:00
kyy
07f4c1258c 테넌트 목록 조회 API 추가 2026-03-19 17:28:32 +09:00
5034785582 fix(backend): fix CSV export authentication by moving role validation inside the handler 2026-03-04 16:10:52 +09:00
9720b77898 feat: implement user data CSV export with dynamic metadata columns 2026-03-04 15:54:11 +09:00
a5102d9b25 feat: implement bulk user actions and organization tree search with auto-expansion 2026-03-04 15:43:00 +09:00
a973cd746b feat: automatically create default user groups upon tenant registration/approval 2026-03-04 14:16:43 +09:00
7c28bd4867 feat: implement CSV bulk user upload functionality 2026-03-04 11:26:37 +09:00
d7071084b7 Merge commit 'f9e5171eb8f38fde9e3e67deb400c846b57fd5e6' into feature/af-is309 2026-03-03 17:23:22 +09:00
badaaa0d1b 테넌트 도메인 동작 확인 2026-03-03 15:49:50 +09:00
5423f920b7 feat(backend): implement dynamic multi-tenancy routing and CORS 2026-03-03 15:27:05 +09:00
a6e7f1253c 테넌트 관리자(Tenant Admin)의 본인 소유 테넌트 목록 조회 및 관리 기능 개선 2026-03-03 14:33:58 +09:00
kyy
20c97843c3 클라이언트 대시보드 통계 실지표 연동 및 백엔드 API 구현 2026-03-03 14:06:27 +09:00
86ef9c6f60 테넌트 소유자, 관리자 분리 2026-03-03 12:38:27 +09:00
kyy
914b1b0d49 DevFront 감사로그 조회 API 추가와 액션 필터링 및 테스트 보강 2026-02-27 17:50:53 +09:00
77af59b7a8 Merge commit 'ac778f836fb78550dce8088a567dc8bf5ffb8d2e' into feature/adminfront 2026-02-27 12:41:01 +09:00
ca45a14bae 테넌트 목록 및 조직 계층 구조 개선 2026-02-27 10:29:15 +09:00
Lectom C Han
8a074f16e7 merge feat/304-userfront-wasm-e2e into dev 2026-02-24 15:40:51 +09:00
Lectom C Han
aeb418fb9f feat: add env-aware client log policy and const lint fixes 2026-02-24 15:38:55 +09:00
b2f0ea48e5 빌드 오류 해결 2026-02-24 13:03:29 +09:00
c54dcccf49 Merge branch 'dev' into feat/org-chart-rebac 2026-02-24 12:42:02 +09:00
4dc4e19c27 test code 수정 2026-02-23 16:50:26 +09:00
kyy
12b1bc4aca PRIVATE 클라이언트 권한 판정 로직 수정 2026-02-23 16:47:41 +09:00
kyy
2c42986a8b Private/PKCE 앱 유형 및 관리자 권한 정책 적용 2026-02-23 13:14:33 +09:00
2ec2653bfb Ory Keto ReBAC Policy & Relation Tuple Architecture 2026-02-20 17:56:05 +09:00
kyy
ebd95166ae 관리자 계정 생성 및 로컬 DB 동기화 실행 순서 조정 2026-02-19 16:31:13 +09:00
5cb713a009 가입 전략 수립 2026-02-19 15:10:36 +09:00
ce703005e1 Merge branch 'feature/user-group' into dev 2026-02-13 14:22:32 +09:00
594fd24adb feat: 구현: 유저 그룹 중심 권한 통합 및 미들웨어 정책 고도화 2026-02-13 14:16:13 +09:00
Lectom C Han
1bc2cfb507 feat(backend): backfill error code on legacy error responses 2026-02-13 11:20:15 +09:00
Lectom C Han
db71364e80 feat(i18n): apply ORY bypass whitelist policy and add error-code tests 2026-02-13 10:47:33 +09:00
Lectom C Han
c1645b2d4b i18n 광역 적용 2026-02-13 10:23:50 +09:00
b9ad54d459 usergroup 2026-02-12 11:41:01 +09:00
74884f6616 린트 적용 2026-02-12 10:39:47 +09:00
68df43f3a8 feat: 테넌트/RP 관리자 할당 UI 및 ReBAC 권한 검증 도구 구현 #244 2026-02-11 13:26:26 +09:00
afaac1781c feat: 테넌트 그룹 기반 권한 상속 고도화 및 개발자 포털 보안 강화 #239 2026-02-11 12:41:03 +09:00