| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2025-05-28 | chore: rename headers from x-id-jwt to x-jwt | mo khan | |
| 2025-05-28 | refactor: always provide a user in the request context | mo khan | |
| 2025-05-28 | refactor: delete jwt verification code | mo khan | |
| 2025-05-28 | refactor: parse headers injected by envoy | mo khan | |
| 2025-05-23 | feat: add external authorization service (authzd) with JWT authentication | mo khan | |
| - Add new authzd gRPC service implementing Envoy's external authorization API - Integrate JWT authentication filter in Envoy configuration with claim extraction - Update middleware to support both cookie-based and header-based user authentication - Add comprehensive test coverage for authorization service and server - Configure proper service orchestration with authzd, sparkled, and Envoy - Update build system and Docker configuration for multi-service deployment - Add grpcurl tool for gRPC service debugging and testing This enables fine-grained authorization control through Envoy's ext_authz filter while maintaining backward compatibility with existing cookie-based authentication. | |||
| 2025-05-15 | refactor: remove more types from oidc package | mo khan | |
| 2025-05-07 | refactor: provide context to repository to apply timeout | mo khan | |
| 2025-05-07 | refactor: move test server to oidc package | mo khan | |
| 2025-04-25 | refactor: move key pacakge to cfg | mo khan | |
| 2025-04-25 | refactor: move db and mountable to app | mo khan | |
