| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2025-08-14 | Fix the broken build by running pg as a separate container. | mo khan | |
| Improve shell scripts and remove /sparkles/restore endpoint - Add error handling and debugging to shell scripts with `set -e` and `DEBUG` flag - Ensure scripts run from project root with `cd "$(dirname "$0")/.."` - Remove `/sparkles/restore` endpoint from public routes and Envoy config - Add Postgres test container support for integration tests - Update CI configuration with newer Runway version and improved test setup - Simplify Makefile by removing redundant commands ------- :robot: Commit message generated by GitLab Duo | |||
| 2025-07-25 | refactor: extract init to load ioc container with dependencies | mo khan | |
| 2025-07-24 | refactor: move function to spice.go | mo khan | |
| 2025-07-23 | feat: authorize requests to create sparkles | mo khan | |
| 2025-07-23 | refactor: inject permission service into sparkle controller | mo khan | |
| 2025-07-23 | refactor: Update RequirePermission middleware to connect to spicedb ↵ | mo khan | |
| CheckPermission API | |||
| 2025-07-23 | refactor: move LoadSchema into authz package | mo khan | |
| 2025-07-22 | feat: connect to spicedb | mo khan | |
| 2025-07-21 | chore: provide local check service as the default | mo khan | |
| 2025-07-11 | refactor: use remote service when it is available | mo khan | |
| 2025-07-11 | feat: add a composite service to provide fallback mechanisms | mo khan | |
| 2025-07-11 | test: add test for remote check service client | mo khan | |
| 2025-07-11 | chore: add test for remote check service | mo khan | |
| 2025-07-11 | refactor: rename CheckService to LocalCheckService | mo khan | |
| 2025-07-11 | chore: split the RemoteCheckService from the LocalCheckService | mo khan | |
| 2025-07-04 | feat: perform a remote PDP authz check | mo khan | |
| 2025-07-02 | fix: check if an authzd host is provided | mo khan | |
| 2025-07-02 | chore: fix AUTHZD_HOST value | mo khan | |
| 2025-06-26 | feat: connect to the remove authorization daemon | mo khan | |
| 2025-06-11 | fix: update authzd to allow access to css js assets | mo khan | |
| 2025-05-28 | test: remove logging from test | mo khan | |
| 2025-05-28 | chore: remove logging of sensitive fields | mo khan | |
| 2025-05-28 | refactor: always provide a user in the request context | mo khan | |
| 2025-05-28 | refactor: parse headers injected by envoy | mo khan | |
| 2025-05-26 | refactor: remove unused code | mo khan | |
| 2025-05-24 | chore: log x-request-id in sparkle and authzd | mo khan | |
| 2025-05-24 | refactor: do not make rpc call from authzd | mo khan | |
| 2025-05-23 | feat: delegate call to remote rpc if permission is required | mo khan | |
| 2025-05-23 | feat: delegate to the remote authzd to check if the permission is granted | mo khan | |
| 2025-05-23 | feat: parse the body of the id token | mo khan | |
| 2025-05-23 | test: extract alias for HTTP Request | mo khan | |
| 2025-05-23 | test: allow authenticated user the ability to create a new sparkle | mo khan | |
| 2025-05-23 | test: update test to generate a valid id_token | mo khan | |
| 2025-05-23 | feat: add external authorization service (authzd) with JWT authentication | mo khan | |
| - Add new authzd gRPC service implementing Envoy's external authorization API - Integrate JWT authentication filter in Envoy configuration with claim extraction - Update middleware to support both cookie-based and header-based user authentication - Add comprehensive test coverage for authorization service and server - Configure proper service orchestration with authzd, sparkled, and Envoy - Update build system and Docker configuration for multi-service deployment - Add grpcurl tool for gRPC service debugging and testing This enables fine-grained authorization control through Envoy's ext_authz filter while maintaining backward compatibility with existing cookie-based authentication. | |||
 |
index : gitlab/sparkled.git | |
| GitLab CI/CD utilities | git |
| summaryrefslogtreecommitdiff |