6 Commits

Include renames

Author	SHA1	Message	Date
dev_agentandClaude Opus 5.5	516865ffe1	Reduce ID token verification errors to a fixed category ... go-oidc's RemoteKeySet puts the JWKS endpoint's response body in its error for non-200 and malformed 200 responses; Verify wrapped it and the callback logged it. verifyError now keeps only a fixed category, plus the expiry for an expired token. A test with a sentinel JWKS body checks it reaches neither the returned error, the response nor the logs. Addresses feature-review finding F03-03 on PR #24. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-03 11:28:53 -04:00
dev_agent	88f7d0a5fa	Feature 03 integration fix: sanitize discovery errors and narrow CSRF exemption (#25) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:22:53 -04:00
dev_agent	36b975ff5b	Feature 03 task 4: CSRF protection and GET /api/v1/me (#22) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 10:51:26 -04:00
dev_agent	b2201c5da1	Feature 03 task 3: Household group gate and auth middleware (#21) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 10:30:07 -04:00
dev_agent	f0bdd0ef40	Feature 03 task 2: Server-side sessions, cookie and logout (#19) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 10:20:14 -04:00
dev_agent	99c8f1625f	Feature 03 task 1: OIDC login and callback against Authentik (#16) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:58:05 -04:00