| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2025-06-17 | feat: create sts binary and run it | mo khan | |
| 2025-06-04 | update dumb-init path in entrypoint.sh | Jay Swain | |
| 2025-05-28 | refactor: remove unused configuration | mo khan | |
| 2025-05-26 | fix: do not provide secrets to sparkle | mo khan | |
| 2025-05-26 | chore: use dumb-init to manage pid 1 | mo khan | |
| 2025-05-24 | chore: suppress output of command -v | mo khan | |
| 2025-05-23 | feat: add external authorization service (authzd) with JWT authentication | mo khan | |
| - Add new authzd gRPC service implementing Envoy's external authorization API - Integrate JWT authentication filter in Envoy configuration with claim extraction - Update middleware to support both cookie-based and header-based user authentication - Add comprehensive test coverage for authorization service and server - Configure proper service orchestration with authzd, sparkled, and Envoy - Update build system and Docker configuration for multi-service deployment - Add grpcurl tool for gRPC service debugging and testing This enables fine-grained authorization control through Envoy's ext_authz filter while maintaining backward compatibility with existing cookie-based authentication. | |||
| 2025-05-15 | chore: add link to envoy install docs | mo khan | |
| 2025-05-15 | refactor: rename init.sh to entrypoint.sh | mo khan | |
| 2025-05-15 | refactor: remove unused environment variables | mo khan | |
| 2025-05-12 | test: remove UI tests | mo khan | |
| 2025-05-12 | chore: mimic how services are run between docker and host machine | mo khan | |
| 2025-05-12 | refactor: mimic target deployment filesystem | mo khan | |
