eae3e0bd2a
dev 병합 code-check 오류 수정
2026-04-28 13:24:11 +09:00
6be0914b65
테넌트 접근 제한 테스트 추가
2026-04-28 13:24:11 +09:00
d0340fc062
테넌트 접근 제한 안내화면 개선
2026-04-28 13:24:11 +09:00
955128a25a
테넌트 접근 제한 로직 보강
2026-04-28 13:24:11 +09:00
367368805a
테넌트 접속 제한 백엔드 로직 수정
2026-04-28 13:24:11 +09:00
3f85f6cfe3
RP 테넌트 접근 정책 변경 시 기존 consent 자동 폐기
2026-04-28 13:24:11 +09:00
b9232687b5
스코프 순서 및 테넌트 검색 수정
2026-04-28 13:24:11 +09:00
373751996a
테넌트 입력 자동완성형 변경
2026-04-28 13:24:11 +09:00
d86c4111ad
RP 테넌트 제한 backend 구현
2026-04-28 13:24:11 +09:00
f97b244a59
RP 정책 설정 UI 수정
2026-04-28 13:24:11 +09:00
5acf248285
접근 제한 UX 구현
2026-04-28 13:24:11 +09:00
0c80063311
Merge pull request 'fix/issue-637' ( #645 ) from fix/issue-637 into dev
...
Reviewed-on: baron/baron-sso#645
2026-04-28 13:14:57 +09:00
e3f9bbf925
style: format dart files to pass formatting check
2026-04-28 13:03:29 +09:00
ff7a786c21
fix: verify local token in _silentSessionRecovery to prevent 401 loop on expired JWT
2026-04-28 11:51:41 +09:00
bbf29bf400
fix: clear stale auth flags and improve user name fallback logic ( #637 )
...
- Clear AuthTokenStore in _silentSessionRecovery when session is invalid (Case 2)
- Use .trim().isNotEmpty for userName fallback to handle empty strings (Case 1)
2026-04-28 11:33:40 +09:00
08aa745e30
make drop 초기화 추가. 한맥그룹 기본값 추가
2026-04-27 17:51:46 +09:00
3fe32b1dfe
Merge pull request 'allowed_origins 롤백' ( #631 ) from code/issue-519 into dev
...
Reviewed-on: baron/baron-sso#631
2026-04-27 14:19:18 +09:00
2f350517b0
allowed_origins 롤백
2026-04-27 14:16:04 +09:00
8bddce43c1
Merge pull request 'code/issue-519' ( #630 ) from code/issue-519 into dev
...
Reviewed-on: baron/baron-sso#630
2026-04-27 13:47:48 +09:00
9378a5a75d
chore: Flutter 코드 포맷팅 적용 및 미사용 코드(Dead Code) 정리
2026-04-27 13:19:14 +09:00
3de28410ae
fix: 회원가입 화면(Userfront) 모바일 뷰에서 인증 입력창 사라지는 반응형 레이아웃 버그 수정
2026-04-27 11:56:49 +09:00
093d2f2af0
refactor: 미사용 Descope 연동 코드 및 환경 변수 제거 ( resolves #519 )
2026-04-27 11:31:14 +09:00
44a853408e
Merge pull request 'feature/df-cosent-skip' ( #626 ) from feature/df-cosent-skip into dev
...
Reviewed-on: baron/baron-sso#626
2026-04-24 15:03:53 +09:00
081cd6739a
backend code-check 오류 수정
2026-04-24 14:59:40 +09:00
7fd750b587
consent 자동 승인 경로 tenantID 전달 누락 수정
2026-04-24 14:51:13 +09:00
26180ae5d1
consent 2차 검증 추가
2026-04-24 14:38:52 +09:00
9072bbc42d
Merge pull request 'feature/issue-609-multi-tenant-oidc-claims' ( #625 ) from feature/issue-609-multi-tenant-oidc-claims into dev
...
Reviewed-on: baron/baron-sso#625
2026-04-24 12:59:27 +09:00
f810427b21
chore(auth): restrict OIDC generated claims debug logs to dev environment
...
- Prevent overly verbose logging of ID token payloads in production by checking APP_ENV
2026-04-24 12:00:00 +09:00
8e28a9d74b
fix(infra): resolve CORS error and Nginx 502 Bad Gateway
...
- Update Hydra and Kratos CORS config to specify allowed origins explicitly instead of using wildcard with allow_credentials: true
- Fix Nginx upstream resolution for Oathkeeper to use correct container hostname (ory_oathkeeper)
2026-04-24 11:59:49 +09:00
cfba44cec2
feat: support dynamic multi-tenant OIDC claims injection ( #609 )
...
- Inject claim based on OIDC Client metadata
- Extract namespaced tenant metadata from traits and flatten it to root
- Expose all joined tenants metadata under and arrays
- Fix missing AuditLog generation during auto-accepted Consent
- Associate correct during auth events AuditLog recording
- Add unit and integration tests for dynamic claims
2026-04-23 17:59:21 +09:00
81f4ddb2b4
Merge pull request 'feature/df-cosent-skip' ( #620 ) from feature/df-cosent-skip into dev
...
Reviewed-on: baron/baron-sso#620
2026-04-23 16:54:03 +09:00
2ee1ee4037
dev 병합 code-check 오류 수정
2026-04-23 16:49:11 +09:00
487ed20286
consent 페이지 반복 노출 현상 수정
2026-04-23 16:00:58 +09:00
991577258b
Merge pull request 'fix: 회원가입 페이지 UI 텍스트 포맷팅 노출 오류 수정 (Issue #610 )' ( #618 ) from fix-test-fixtures into dev
...
Reviewed-on: baron/baron-sso#618
2026-04-23 10:43:13 +09:00
97fee9dbae
Merge pull request 'feature/df-developer' ( #616 ) from feature/df-developer into dev
...
Reviewed-on: baron/baron-sso#616
2026-04-22 17:32:17 +09:00
c40202f502
dev 병합 code check 수정
2026-04-22 17:27:33 +09:00
9e73059d2a
개발자 등록 신청 입력 안내 및 역할 표기 개선
2026-04-22 15:47:38 +09:00
5d334069c7
개발자 권한 신청 및 관리 기능 E2E 테스트 추가
2026-04-22 15:47:38 +09:00
685923a03e
개발자 권한 신청 승인/취소 및 RP 생성 흐름 개선
2026-04-22 15:47:37 +09:00
2216d9c4e4
개발자 신청 API 단일화 및 RP 권한 자동 부여 구현
2026-04-22 15:46:20 +09:00
4dc274a5d7
클라이언트 빈 목록 대응 개발자 신청 인라인 링크 및 모달 구현
2026-04-22 15:46:20 +09:00
4139bb7064
개발자 신청 API 구현 및 RP 생성 시 Keto 권한 자동 부여 로직 추가
2026-04-22 15:46:20 +09:00
18e9a2aa4a
개발자 권한 신청 도메인 모델 및 서비스 레이어 구현
2026-04-22 15:46:20 +09:00
7ab79a8bc3
fix: 회원가입 페이지 UI 텍스트 포맷팅 노출 오류 수정 (Issue #610 )
...
- Dart에서 인식하지 못하는 TOML 파싱용 정규식([[:space:]]) 수정
- 이스케이프된 개행 문자(\\n)를 실제 개행 문자로 치환하는 로직 추가
2026-04-22 10:58:30 +09:00
b05700f7cc
Merge pull request 'fix-test-fixtures' ( #606 ) from fix-test-fixtures into dev
...
Reviewed-on: baron/baron-sso#606
2026-04-22 09:36:47 +09:00
750776f0a0
style(userfront): format flutter files to satisfy CI
2026-04-21 18:06:57 +09:00
797e6cc90a
fix(devfront): add explicit button type and improve test stability
2026-04-21 18:05:32 +09:00
a1d516cd61
test: fix TestPasswordLogin_OIDC_Success to expect sessionJwt in OIDC flow
2026-04-21 17:18:45 +09:00
7f955e2122
style: fix formatting issues caught by biome in adminfront
2026-04-21 17:11:08 +09:00
4427ab1f85
fix: resolve admin session infinite reload loop and sync auth state
...
- Prevent infinite redirection loop by clearing oidc-client user state on 401 errors.
- Sync apiClient request interceptor to use userManager.getUser() for reliable token retrieval.
- Add extensive console logs for better session issue diagnosis.
- Fix TS error in LoginPage by updating button variant.
- Revert 'ae03fe1' (updated playwright fixtures to real domain) as requested.
2026-04-21 17:06:03 +09:00