Lilleman auf Larv lilleman
lilleman pushed to role-vocabulary at larvit/plainpages 2026-08-03 13:28:54 +02:00
41c568796c Cut the security-model threat table down to what the code cannot show
lilleman closed pull request larvit/plainpages#40 2026-08-03 13:28:53 +02:00
Document the auth security model in README
lilleman pushed to role-vocabulary at larvit/plainpages 2026-08-03 12:19:15 +02:00
f7d70cfff8 Rename the Keto User namespace to Identity, matching Kratos
lilleman deleted branch renovate/renovate-renovate-44.x from larvit/plainpages 2026-08-03 12:13:04 +02:00
lilleman pushed to main at larvit/plainpages 2026-08-03 12:13:04 +02:00
5c3af63847 Merge branch 'main' into renovate/renovate-renovate-44.x
21cd878447 Update renovate/renovate Docker tag to v44.7.2
Compare 2 commits »
lilleman automatically merged pull request larvit/plainpages#42 2026-08-03 12:13:02 +02:00
lilleman pushed to renovate/renovate-renovate-44.x at larvit/plainpages 2026-08-03 12:10:26 +02:00
5c3af63847 Merge branch 'main' into renovate/renovate-renovate-44.x
1abaa22a97 Update actions/checkout action to v4.4.0
Compare 2 commits »
lilleman created pull request larvit/plainpages#43 2026-08-03 11:39:45 +02:00
Rename the plugin permission gate to role and document the model
lilleman created branch role-vocabulary in larvit/plainpages 2026-08-03 11:39:37 +02:00
lilleman pushed to role-vocabulary at larvit/plainpages 2026-08-03 11:39:37 +02:00
ca3d49ec45 Document the users, groups and roles model in README
acce2d2556 Rename the plugin-API permission gate to role
Compare 2 commits »
lilleman pushed to auth-security-model at larvit/plainpages 2026-08-02 17:34:55 +02:00
702e42de09 Reflow the security-model prose to the file's wrap width
lilleman pushed to auth-security-model at larvit/plainpages 2026-08-02 17:33:42 +02:00
98bdd2c1b5 Record the open CSRF token-binding decision as a todo item
lilleman pushed to auth-security-model at larvit/plainpages 2026-08-02 17:33:03 +02:00
12913402a6 Add the seeded admin login to the production secrets checklist
lilleman pushed to auth-security-model at larvit/plainpages 2026-08-02 17:25:06 +02:00
7dee80a976 Review fixes: denylist-conditional revoke, Ory secret wiring, exp guard test
lilleman pushed to auth-security-model at larvit/plainpages 2026-08-02 17:14:18 +02:00
c0fe8b0a82 Review fixes: re-mint path, real session lifetime, full secret checklist
lilleman created pull request larvit/plainpages#40 2026-08-02 17:03:11 +02:00
Document the auth security model in README
lilleman pushed to auth-security-model at larvit/plainpages 2026-08-02 17:03:07 +02:00
fb7d20a7db Document the auth security model in README
lilleman created branch auth-security-model in larvit/plainpages 2026-08-02 17:03:07 +02:00
lilleman pushed to main at larvit/plainpages 2026-08-02 16:18:45 +02:00
0919adf4ef Review fixes: plain depends_on merge, positive secret assertion
f5f4455b81 Browser E2E for the admin OAuth2-clients screen
Compare 2 commits »
lilleman deleted branch e2e-oauth2-clients from larvit/plainpages 2026-08-02 16:18:45 +02:00