Compare commits

..

15 Commits

Author SHA1 Message Date
lilleman e66c530b0a Merge branch 'main' into role-vocabulary
CI / full-gate (push) Successful in 2m34s
2026-08-03 17:37:47 +02:00
lilleman 6d0f5a99bf Fix a stale ctx.identity reference in the file map
CI / full-gate (push) Successful in 2m34s
2026-08-03 17:16:19 +02:00
lilleman 9097552065 Say user throughout, noting Ory's identity naming in the docs
CI / full-gate (push) Successful in 2m32s
2026-08-03 17:13:20 +02:00
lilleman 076d1f6926 Record the authorization vocabulary decision in AGENTS.md
CI / full-gate (push) Successful in 2m37s
2026-08-03 17:04:17 +02:00
lilleman 925debbd51 Rename the coarse gate from role to permission, matching RBAC 2026-08-03 17:02:47 +02:00
lilleman 41c568796c Cut the security-model threat table down to what the code cannot show
CI / full-gate (push) Successful in 2m32s
2026-08-03 13:28:56 +02:00
lilleman f7d70cfff8 Rename the Keto User namespace to Identity, matching Kratos
CI / full-gate (push) Successful in 2m34s
2026-08-03 12:19:12 +02:00
lilleman ca3d49ec45 Document the users, groups and roles model in README
CI / full-gate (push) Successful in 2m35s
2026-08-03 11:39:26 +02:00
lilleman acce2d2556 Rename the plugin-API permission gate to role 2026-08-03 11:31:04 +02:00
lilleman 702e42de09 Reflow the security-model prose to the file's wrap width
CI / full-gate (push) Successful in 2m41s
2026-08-02 17:34:57 +02:00
lilleman 98bdd2c1b5 Record the open CSRF token-binding decision as a todo item
CI / full-gate (push) Successful in 2m35s
2026-08-02 17:33:44 +02:00
lilleman 12913402a6 Add the seeded admin login to the production secrets checklist
CI / full-gate (push) Successful in 2m37s
2026-08-02 17:33:04 +02:00
lilleman 7dee80a976 Review fixes: denylist-conditional revoke, Ory secret wiring, exp guard test
CI / full-gate (push) Successful in 2m40s
2026-08-02 17:25:07 +02:00
lilleman c0fe8b0a82 Review fixes: re-mint path, real session lifetime, full secret checklist
CI / full-gate (push) Successful in 6s
2026-08-02 17:14:20 +02:00
lilleman fb7d20a7db Document the auth security model in README
CI / full-gate (push) Successful in 5s
2026-08-02 17:03:09 +02:00

Diff Content Not Available