Alphaeus Mote 6fdf9a9d54 feat(users): assign RBAC roles to users; OIDC default-role dropdown + clearer SSO config ...

Roles:
- Add GET /api/v1/roles (built-in SuperAdmin/Admin/Operator/Viewer) and
  wire role assignment into user create/update (UserRepository.SetRoles /
  GetRoleNames / ListRoles). User responses now include roles.
- User dialog gains a roles multi-select; the users list shows role chips.

OIDC / SSO config UI:
- Default role is now a dropdown populated from /roles.
- Issuer URL shows real provider examples (Entra/Okta/Google).
- Replace the confusing manual "Redirect URL" field with a read-only,
  auto-derived callback URL (from the browser origin / public URL) plus a
  copy button — the exact value to register at the IdP. The backend still
  auto-derives the callback and honors an env override.

Verified: /roles lists the four roles; creating/updating a user with roles
round-trips through GET.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-09-02 21:25:59 -04:00

..

connections.go

fix(connections): List must return the full connection shape

2026-09-02 14:15:36 -04:00

credentials.go

fix(repository): parse TEXT timestamps as strings for modernc sqlite

2026-09-02 13:55:11 -04:00

managed_members.go

feat(rules): dynamic-group reconciliation + editor-facing APIs

2026-09-02 14:57:30 -04:00

rule_runs.go

fix(repository): parse TEXT timestamps as strings for modernc sqlite

2026-09-02 13:55:11 -04:00

rules_logic.go

feat(rules): dynamic-group reconciliation + editor-facing APIs

2026-09-02 14:57:30 -04:00

rules.go

fix(rules): record last run outcome on the rule row

2026-09-02 17:48:27 -04:00

schedules.go

fix(repository): parse TEXT timestamps as strings for modernc sqlite

2026-09-02 13:55:11 -04:00

timestamps_test.go

fix(repository): flatten GetByID condition loading to avoid nested cursor

2026-09-02 15:11:28 -04:00

users.go

feat(users): assign RBAC roles to users; OIDC default-role dropdown + clearer SSO config

2026-09-02 21:25:59 -04:00