1
0
forked from baron/baron-sso
Commit Graph

1053 Commits

Author SHA1 Message Date
bbf29bf400 fix: clear stale auth flags and improve user name fallback logic (#637)
- Clear AuthTokenStore in _silentSessionRecovery when session is invalid (Case 2)

- Use .trim().isNotEmpty for userName fallback to handle empty strings (Case 1)
2026-04-28 11:33:40 +09:00
08aa745e30 make drop 초기화 추가. 한맥그룹 기본값 추가 2026-04-27 17:51:46 +09:00
3fe32b1dfe Merge pull request 'allowed_origins 롤백' (#631) from code/issue-519 into dev
Reviewed-on: baron/baron-sso#631
2026-04-27 14:19:18 +09:00
2f350517b0 allowed_origins 롤백 2026-04-27 14:16:04 +09:00
8bddce43c1 Merge pull request 'code/issue-519' (#630) from code/issue-519 into dev
Reviewed-on: baron/baron-sso#630
2026-04-27 13:47:48 +09:00
9378a5a75d chore: Flutter 코드 포맷팅 적용 및 미사용 코드(Dead Code) 정리 2026-04-27 13:19:14 +09:00
3de28410ae fix: 회원가입 화면(Userfront) 모바일 뷰에서 인증 입력창 사라지는 반응형 레이아웃 버그 수정 2026-04-27 11:56:49 +09:00
093d2f2af0 refactor: 미사용 Descope 연동 코드 및 환경 변수 제거 (resolves #519) 2026-04-27 11:31:14 +09:00
44a853408e Merge pull request 'feature/df-cosent-skip' (#626) from feature/df-cosent-skip into dev
Reviewed-on: baron/baron-sso#626
2026-04-24 15:03:53 +09:00
kyy
081cd6739a backend code-check 오류 수정 2026-04-24 14:59:40 +09:00
kyy
7fd750b587 consent 자동 승인 경로 tenantID 전달 누락 수정 2026-04-24 14:51:13 +09:00
kyy
26180ae5d1 consent 2차 검증 추가 2026-04-24 14:38:52 +09:00
9072bbc42d Merge pull request 'feature/issue-609-multi-tenant-oidc-claims' (#625) from feature/issue-609-multi-tenant-oidc-claims into dev
Reviewed-on: baron/baron-sso#625
2026-04-24 12:59:27 +09:00
f810427b21 chore(auth): restrict OIDC generated claims debug logs to dev environment
- Prevent overly verbose logging of ID token payloads in production by checking APP_ENV
2026-04-24 12:00:00 +09:00
8e28a9d74b fix(infra): resolve CORS error and Nginx 502 Bad Gateway
- Update Hydra and Kratos CORS config to specify allowed origins explicitly instead of using wildcard with allow_credentials: true
- Fix Nginx upstream resolution for Oathkeeper to use correct container hostname (ory_oathkeeper)
2026-04-24 11:59:49 +09:00
cfba44cec2 feat: support dynamic multi-tenant OIDC claims injection (#609)
- Inject  claim based on OIDC Client metadata
- Extract namespaced tenant metadata from traits and flatten it to root
- Expose all joined tenants metadata under  and  arrays
- Fix missing AuditLog generation during auto-accepted Consent
- Associate correct  during auth events AuditLog recording
- Add unit and integration tests for dynamic claims
2026-04-23 17:59:21 +09:00
81f4ddb2b4 Merge pull request 'feature/df-cosent-skip' (#620) from feature/df-cosent-skip into dev
Reviewed-on: baron/baron-sso#620
2026-04-23 16:54:03 +09:00
kyy
2ee1ee4037 dev 병합 code-check 오류 수정 2026-04-23 16:49:11 +09:00
kyy
487ed20286 consent 페이지 반복 노출 현상 수정 2026-04-23 16:00:58 +09:00
991577258b Merge pull request 'fix: 회원가입 페이지 UI 텍스트 포맷팅 노출 오류 수정 (Issue #610)' (#618) from fix-test-fixtures into dev
Reviewed-on: baron/baron-sso#618
2026-04-23 10:43:13 +09:00
97fee9dbae Merge pull request 'feature/df-developer' (#616) from feature/df-developer into dev
Reviewed-on: baron/baron-sso#616
2026-04-22 17:32:17 +09:00
kyy
c40202f502 dev 병합 code check 수정 2026-04-22 17:27:33 +09:00
kyy
9e73059d2a 개발자 등록 신청 입력 안내 및 역할 표기 개선 2026-04-22 15:47:38 +09:00
kyy
5d334069c7 개발자 권한 신청 및 관리 기능 E2E 테스트 추가 2026-04-22 15:47:38 +09:00
kyy
685923a03e 개발자 권한 신청 승인/취소 및 RP 생성 흐름 개선 2026-04-22 15:47:37 +09:00
kyy
2216d9c4e4 개발자 신청 API 단일화 및 RP 권한 자동 부여 구현 2026-04-22 15:46:20 +09:00
kyy
4dc274a5d7 클라이언트 빈 목록 대응 개발자 신청 인라인 링크 및 모달 구현 2026-04-22 15:46:20 +09:00
kyy
4139bb7064 개발자 신청 API 구현 및 RP 생성 시 Keto 권한 자동 부여 로직 추가 2026-04-22 15:46:20 +09:00
kyy
18e9a2aa4a 개발자 권한 신청 도메인 모델 및 서비스 레이어 구현 2026-04-22 15:46:20 +09:00
7ab79a8bc3 fix: 회원가입 페이지 UI 텍스트 포맷팅 노출 오류 수정 (Issue #610)
- Dart에서 인식하지 못하는 TOML 파싱용 정규식([[:space:]]) 수정
- 이스케이프된 개행 문자(\\n)를 실제 개행 문자로 치환하는 로직 추가
2026-04-22 10:58:30 +09:00
b05700f7cc Merge pull request 'fix-test-fixtures' (#606) from fix-test-fixtures into dev
Reviewed-on: baron/baron-sso#606
2026-04-22 09:36:47 +09:00
750776f0a0 style(userfront): format flutter files to satisfy CI 2026-04-21 18:06:57 +09:00
797e6cc90a fix(devfront): add explicit button type and improve test stability 2026-04-21 18:05:32 +09:00
a1d516cd61 test: fix TestPasswordLogin_OIDC_Success to expect sessionJwt in OIDC flow 2026-04-21 17:18:45 +09:00
7f955e2122 style: fix formatting issues caught by biome in adminfront 2026-04-21 17:11:08 +09:00
4427ab1f85 fix: resolve admin session infinite reload loop and sync auth state
- Prevent infinite redirection loop by clearing oidc-client user state on 401 errors.
- Sync apiClient request interceptor to use userManager.getUser() for reliable token retrieval.
- Add extensive console logs for better session issue diagnosis.
- Fix TS error in LoginPage by updating button variant.
- Revert 'ae03fe1' (updated playwright fixtures to real domain) as requested.
2026-04-21 17:06:03 +09:00
ae03fe1475 chore: update playwright fixtures to use real SSO domain
Since the OIDC authority was updated to https://sso.hmac.kr/oidc, the Playwright mocks and localStorage seed values must match exactly for tests to pass in the new configuration.
2026-04-21 15:02:53 +09:00
e7156450ba fix: restore missing POST /users route in admin API
Details:
- The route `admin.Post("/users")` was accidentally merged into a comment line for `admin.Get("/users/export")`. This caused the 405 Method Not Allowed error when trying to create users.
- Restored the route on its own line.
2026-04-21 14:40:09 +09:00
0f79b7635b fix: resolve OIDC session state issue and synchronize portal sessions
Details:
- Backend: Extract Kratos session cookies and propagate via SetCookies in AuthInfo.
- Backend: Include sessionJwt and token during OIDC flows in PasswordLogin.
- UserFront: Add _silentSessionRecovery in main.dart to recover session via cookies if localStorage token is missing.
- UserFront: Update AuthProxyService, AuthTokenStore, AuthNotifier to support silent recovery and immediate local state update before redirect.
- AdminFront/DevFront: Fix OIDC authority to point directly to Gateway proxy and add recovery/error UI components.
2026-04-21 14:10:27 +09:00
1024ad17d3 Merge pull request 'feature/df-rebac' (#595) from feature/df-rebac into dev
Reviewed-on: baron/baron-sso#595
2026-04-20 16:40:27 +09:00
kyy
141c8e0ab5 dev 브런치 반영 code-check 오류 수정 2026-04-20 16:34:04 +09:00
kyy
1f464b60a4 감사로그 조회 에러 수정 2026-04-20 15:48:43 +09:00
kyy
ea387ff6f2 관계 조회 권한 사용자 검색 안내 강화 2026-04-20 15:48:43 +09:00
kyy
7e0680a71c 동의 및 사용자 탭 에러 메세지 수정 2026-04-20 15:48:42 +09:00
kyy
e15de6d334 일반 사용자의 DevFront 접근 및 RP 관리자 권한 연동 2026-04-20 15:48:42 +09:00
kyy
51e46a4d00 RP 관계 범위의 콘솔 접근 허용 2026-04-20 15:48:42 +09:00
kyy
0b8eaec636 수동 할당에서 생성자 관계 숨김 2026-04-20 15:48:42 +09:00
kyy
2a9b044992 RP 수정 권한 안내 표시 2026-04-20 15:48:42 +09:00
kyy
6322ff5630 DevFront RP 관계 설정 문서 작성 2026-04-20 15:48:42 +09:00
kyy
a79c350831 devfront 관계 탭 사용자 검색·다중선택 UX 개선 2026-04-20 15:48:42 +09:00