summaryrefslogtreecommitdiff
path: root/app/init.go
AgeCommit message (Collapse)Author
2025-09-12chore: rename ZED_ env vars to SPICEDB_HEADmainmo khan
2025-07-31Connect to postgresqlmo khan
2025-07-30refactor: extract Boot() function to kickstart background job queue APImo khan
2025-07-30refactor: rename repository typesmo khan
2025-07-30refactor: add ctor option to add repository publishingmo khan
2025-07-30refactor: extract a separate repository to publish eventsmo khan
2025-07-25fix: do not close the client after exiting from init()mo khan
2025-07-25chore: release authzed client on shutdownmo khan
2025-07-24refactor: extract job to process relationship updates in backgroundmo khan
2025-07-24refactor: delegate to GlobalID to provide object referencesmo khan
2025-07-24fix: add some hard-coded fixes to get relationships written to the databasemo khan
2025-07-24refactor: use username as id for demomo khan
2025-07-24chore: add event aggregator to IoCmo khan
2025-07-24feat: publish an event after a new sparkle is saved to the databasemo khan
2025-07-23feat: authorize requests to create sparklesmo khan
2025-07-23refactor: inject permission service into sparkle controllermo khan
2025-07-23refactor: Update RequirePermission middleware to connect to spicedb ↵mo khan
CheckPermission API
2025-05-28refactor: delete jwt verification codemo khan
2025-05-24chore: log x-request-id in sparkle and authzdmo khan
2025-05-24fix: register oidc provider oncemo khan
2025-05-24feat: connect rpc client to inversion of control containermo khan
2025-05-23feat: add external authorization service (authzd) with JWT authenticationmo khan
- Add new authzd gRPC service implementing Envoy's external authorization API - Integrate JWT authentication filter in Envoy configuration with claim extraction - Update middleware to support both cookie-based and header-based user authentication - Add comprehensive test coverage for authorization service and server - Configure proper service orchestration with authzd, sparkled, and Envoy - Update build system and Docker configuration for multi-service deployment - Add grpcurl tool for gRPC service debugging and testing This enables fine-grained authorization control through Envoy's ext_authz filter while maintaining backward compatibility with existing cookie-based authentication.
2025-05-15chore: allow envoy to handle health checksmo khan
2025-05-15feat: remove oauth config and client secret from sparklemo khan
2025-05-15refactor: decouple from oauth configmo khan
2025-05-15refactor: remove unused environment variablesmo khan
2025-05-15refactor: move NewOIDCProvider to web packagemo khan
2025-05-15refactor: remove oidc.OpenID structmo khan
2025-05-15refactor: provide oauth config to oidc.Newmo khan
2025-05-15chore: register oauth2 config in inversion of control containermo khan
2025-05-15refactor: delete code that is now handled by envoymo khan
2025-05-14refactor: remove unnecessary params from ctormo khan
2025-05-14feat: provider a fallback provider that defaults to hard-coded pathsmo khan
2025-05-14test: exit if discovery endpoint is not reachablemo khan
2025-05-07refactor: extract helper to log errors consistentlymo khan
2025-04-28chore: override the default http client to log all outbound requestsmo khan
2025-04-25refactor: move db and mountable to appmo khan
2025-04-25refactor: move domain package into appmo khan
2025-04-25refactor: move Repository interface to domainmo khan
2025-04-21feat: connect the current user middlewaremo khan
2025-04-21refactor: convert Repository to Repository[T Entity]mo khan
2025-04-17refactor: use mockoidc to test out id token verificationmo khan
2025-04-16feat: create middleware to parse id token from session cookiemo khan
2025-04-15feat: connect a blank dashboard controllermo khan
2025-04-15feat: create session cookie tied to access tokenmo khan
2025-04-14test: add placeholder for missing testsmo khan
2025-04-14feat: connect the sessions controller into the appmo khan
2025-04-14fix: update go mod namespacemo khan
2025-04-12refactor: extract mountable interface to allow controllers to mount ↵mo khan
themselves into the mux