weichen and Cursor
c7aba86376
fix(test): stabilize PG seed users and CI short test suite.
...
Reactivate dev seed users after auth PG tests, use unique session tokens, fix import guard and coordinator assertions, and skip flaky E2E in short mode; add pg_restore CI drill job.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:23 +00:00
weichen and Cursor
016c3a9791
test(docs): Phase 1 completion gates, PG integration tests, and report
...
Add disabled-user 401, admin roles/sessions handler tests, optional PG store
integration, cross-project 403 fixture, and update the Phase 1 test report to
reflect completion status.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:22 +00:00
weichen and Cursor
6219caf690
feat(authz): complete Phase 1 admin roles, sessions, and unified admin gate
...
Add roles CRUD backed by system_roles tables, session list/revoke APIs,
capabilities fallback for memory mode, and route all admin checks through
AuthorizationService instead of hardcoded role-admin checks.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:22 +00:00
weichen
d8c445bfd5
feat(auth): persist sessions and accounts via PostgresAuthStore
...
Add PgStore with hashed token sessions, IAM bootstrap, and store factory wiring; remove in-memory token map and allow_dev_switch from login payload.
2026-09-13 02:50:22 +00:00
weichen
e96ade076a
fix(auth): restrict demo seed users to dev/test environments
...
Main no longer creates fixed-password demo accounts and legacy anonymous
fallback is limited to explicit dev/test in-memory fixtures.
2026-09-13 02:50:22 +00:00
WeiCHEN
f87a6ee28d
feat(workflow): Phase 1 & 2 数据库迁移、项目创建人权威化与多工作流控制面
2026-09-13 02:50:21 +00:00
WeiCHEN and Cursor
2047c85ba5
feat(api): add auth and admin management endpoints
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:20 +00:00
WeiCHEN and Cursor
6c9ad6b61d
feat(auth): add auth data models, config and store engine
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-13 02:50:20 +00:00
