Repository navigation

fix(auth): disable ROPC and propose product-rendered passkey ceremonies - #128

Draft

seonghobae wants to merge 23 commits into

codex/keyverse-orchestrator-free-developmentfrom

feat/naruon-direct-access-grants-exception

Draft

fix(auth): disable ROPC and propose product-rendered passkey ceremonies#128
seonghobae wants to merge 23 commits into
codex/keyverse-orchestrator-free-developmentfrom
feat/naruon-direct-access-grants-exception

Commits on Sep 2, 2026
- feat(realm): scoped Direct Access Grants exception for naruon-web only
  
  seonghobae
  and
  claude
  committed
  5404dd0
- feat(registration): scoped password-credential issuance for naruon signup
  
  seonghobae
  and
  claude
  committed
  5661b3d
Commits on Sep 3, 2026
- fix(registration): clear required actions on new password accounts
  
  seonghobae
  and
  claude
  committed
  7c1939d
- docs(adr): correct ADR-0014 with the RFC 9700/10017 ROPC prohibition finding
  
  seonghobae
  and
  claude
  committed
  c97f333
- docs(relying-party): expand validate_relying_party_registration's docstring
  
  seonghobae
  and
  claude
  committed
  0ddcad6
- fix(adr-0014): disable directAccessGrantsEnabled, fix stale index status
  
  seonghobae
  and
  claude
  committed
  79fe43d
- fix(adr-0015): fail closed password registration, guard realm regression
  
  seonghobae
  and
  claude
  committed
  44f0cb9
- docs(adr-0014/0015): OpenAPI accuracy, changelog, operability, doctoring record
  
  seonghobae
  and
  claude
  committed
  86de970
- test(auth): reject cleartext Keycloak admin URLs
  seonghobae
  committed
  31a21ca
- test(auth): use TLS origins in product transport fixtures
  seonghobae
  committed
  c2a5013
- test(auth): cover Keycloak origin validation edges
  seonghobae
  committed
  7deedf0
- fix(auth): enforce TLS on product Keycloak transport
  seonghobae
  committed
  cd0e435
- test(auth): require seed-time password token revocation
  seonghobae
  committed
  70c8004
- fix(auth): revoke omitted password registration token
  seonghobae
  committed
  f6912b1
- test(auth): require seed-time signup token revocation
  seonghobae
  committed
  10f28e7
- fix(auth): revoke omitted registration token
  seonghobae
  committed
  5f61cab
- docs(product-keycloak-client): flag reset_password as dormant capability
  
  seonghobae
  and
  claude
  committed
  6ffef10
Commits on Sep 4, 2026
Commits on Sep 5, 2026
- Merge remote-tracking branch 'origin/codex/keyverse-orchestrator-free-development' into codex/pr128-restack
  seonghobae
  committed
  e1cf080
Commits on Sep 7, 2026
- docs(auth): propose product-rendered passkey ceremonies
  seonghobae
  committed
  f893ec6

Navigation Menu

Repository navigation

fix(auth): disable ROPC and propose product-rendered passkey ceremonies - #128

fix(auth): disable ROPC and propose product-rendered passkey ceremonies#128
seonghobae wants to merge 23 commits into
codex/keyverse-orchestrator-free-developmentfrom
feat/naruon-direct-access-grants-exception

Commits on Sep 2, 2026

feat(realm): scoped Direct Access Grants exception for naruon-web only

feat(registration): scoped password-credential issuance for naruon signup

Commits on Sep 3, 2026

fix(registration): clear required actions on new password accounts

docs(adr): correct ADR-0014 with the RFC 9700/10017 ROPC prohibition finding

docs(relying-party): expand validate_relying_party_registration's docstring

fix(adr-0014): disable directAccessGrantsEnabled, fix stale index status

fix(adr-0015): fail closed password registration, guard realm regression

docs(adr-0014/0015): OpenAPI accuracy, changelog, operability, doctoring record

test(auth): reject cleartext Keycloak admin URLs

test(auth): use TLS origins in product transport fixtures

test(auth): cover Keycloak origin validation edges

fix(auth): enforce TLS on product Keycloak transport

test(auth): require seed-time password token revocation

fix(auth): revoke omitted password registration token

test(auth): require seed-time signup token revocation

fix(auth): revoke omitted registration token

docs(product-keycloak-client): flag reset_password as dormant capability

Commits on Sep 4, 2026

Merge remote-tracking branch 'origin/main' into codex/goal20-keyverse-owner-repair

fix(auth): remove dormant password reset authority

test(actions): remove retired steward contract

Merge commit '239e362c95d48894a10841ec8a087f9107f3f90c' into codex/goal20-keyverse-owner-repair

Commits on Sep 5, 2026

Merge remote-tracking branch 'origin/codex/keyverse-orchestrator-free-development' into codex/pr128-restack

Commits on Sep 7, 2026

docs(auth): propose product-rendered passkey ceremonies