shankar0123 11b145b641 Merge Fix 06 (HIGH A-6): strict UA/IP binding — close request-empty bypass in MED-16 ...

# Conflicts:
#	CHANGELOG.md
#	internal/api/handler/auth_session_oidc.go
#	internal/api/handler/auth_session_oidc_test.go

2026-05-11 11:19:04 +00:00

..

domain

feat(oidc): Enabled toggle on OIDCProvider (MED-9)

2026-05-10 21:59:17 +00:00

groupclaim

auth-bundle-2 Phase 3: OIDC service (HandleAuthRequest, HandleCallback,

2026-05-10 04:56:03 +00:00

testfixtures

auth-bundle-2 Phase 10: Keycloak testcontainers harness + 5-test e2e OIDC matrix + optional Okta smoke (integration build tag)

2026-05-10 07:54:36 +00:00

bench_keycloak_test.go

auth-bundle-2 Phase 14: session + OIDC validation benchmarks (steady-state + cold paths) + auth-benchmarks.md operator doc + Makefile targets

2026-05-10 16:51:28 +00:00

bench_test.go

harden(oidc): pre-login UA/IP binding (MED-16) — RFC 9700 §4.7.1

2026-05-10 23:18:23 +00:00

bootstrap_hook.go

auth-bundle-2 Phase 7 + Phase 7.5: OIDC first-admin bootstrap +

2026-05-10 06:51:41 +00:00

doc.go

auth-bundle-2 Phase 3: OIDC service (HandleAuthRequest, HandleCallback,

2026-05-10 04:56:03 +00:00

email_domain_test.go

fix(oidc): enforce AllowedEmailDomains allowlist in HandleCallback

2026-05-10 20:30:32 +00:00

integration_keycloak_rotate_test.go

test(oidc): Keycloak integration test for MED-6 auto-refresh (Nit-5)

2026-05-10 23:31:10 +00:00

integration_keycloak_test.go

test(oidc): Keycloak integration test for MED-6 auto-refresh (Nit-5)

2026-05-10 23:31:10 +00:00

integration_okta_smoke_test.go

harden(oidc): pre-login UA/IP binding (MED-16) — RFC 9700 §4.7.1

2026-05-10 23:18:23 +00:00

logging_test.go

harden(oidc): pre-login UA/IP binding (MED-16) — RFC 9700 §4.7.1

2026-05-10 23:18:23 +00:00

prelogin_test.go

harden(oidc): pre-login UA/IP binding (MED-16) — RFC 9700 §4.7.1

2026-05-10 23:18:23 +00:00

prelogin.go

harden(oidc): pre-login UA/IP binding (MED-16) — RFC 9700 §4.7.1

2026-05-10 23:18:23 +00:00

provider_enabled_test.go

harden(oidc): pre-login UA/IP binding (MED-16) — RFC 9700 §4.7.1

2026-05-10 23:18:23 +00:00

service_test.go

Merge Fix 06 (HIGH A-6): strict UA/IP binding — close request-empty bypass in MED-16

2026-05-11 11:19:04 +00:00

service.go

Merge Fix 06 (HIGH A-6): strict UA/IP binding — close request-empty bypass in MED-16

2026-05-11 11:19:04 +00:00

test_discovery.go

feat(oidc): POST /api/v1/auth/oidc/test dry-run endpoint (MED-5)

2026-05-10 23:25:54 +00:00