hsiegeln 051f7fdae9 feat: auth hardening — scope enforcement, tenant isolation, and docs ...

Add @PreAuthorize annotations to all API controllers (14 endpoints
across 6 controllers) enforcing OAuth2 scopes: apps:manage, apps:deploy,
billing:manage, observe:read, platform:admin.

Enforce tenant isolation: TenantResolutionFilter now rejects cross-tenant
access on /api/tenants/{id}/* paths. New TenantOwnershipValidator checks
environment/app ownership for paths without tenantId. Platform admins
bypass both layers.

Fix frontend: OrgResolver split into two useEffect hooks so scopes
refresh on org switch. Scopes now served from /api/config (single source
of truth). Bootstrap cleaned — standalone org permissions removed.

Update docs/architecture.md, docs/user-manual.md, and CLAUDE.md to
reflect all auth hardening changes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-05 15:32:53 +02:00

.gitea/workflows

fix: use standard dist/ output for Vite, copy to static/ explicitly

2026-04-04 23:44:50 +02:00

.mvn/wrapper

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

docker

feat: auth hardening — scope enforcement, tenant isolation, and docs

2026-04-05 15:32:53 +02:00

docs

feat: auth hardening — scope enforcement, tenant isolation, and docs

2026-04-05 15:32:53 +02:00

src

feat: auth hardening — scope enforcement, tenant isolation, and docs

2026-04-05 15:32:53 +02:00

ui

feat: auth hardening — scope enforcement, tenant isolation, and docs

2026-04-05 15:32:53 +02:00

.env.example

fix: register API resource in Logto for JWT access tokens

2026-04-05 01:01:32 +02:00

.gitattributes

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

.gitignore

chore: add .worktrees to .gitignore

2026-04-04 17:26:22 +02:00

CLAUDE.md

feat: auth hardening — scope enforcement, tenant isolation, and docs

2026-04-05 15:32:53 +02:00

docker-compose.dev.yml

feat: auth hardening — scope enforcement, tenant isolation, and docs

2026-04-05 15:32:53 +02:00

docker-compose.yml

infra: remove ForwardAuth, keys mount, add OIDC env vars for server

2026-04-05 12:44:04 +02:00

Dockerfile

fix: use standard dist/ output for Vite, copy to static/ explicitly

2026-04-04 23:44:50 +02:00

HOWTO.md

feat: add SPA controller, Traefik route, CI frontend build, and HOWTO update

2026-04-04 22:06:36 +02:00

mvnw

fix: set execute permission on Maven wrapper

2026-04-04 15:34:52 +02:00

mvnw.cmd

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

pom.xml

feat: add Phase 3 dependencies and configuration

2026-04-04 17:29:06 +02:00

STRATEGY.md

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

traefik.yml

feat: add Docker Compose production stack with Traefik + Logto

2026-04-04 15:09:49 +02:00

Description

Multi-tenant SaaS platform — Camel application runtime with built-in observability. Wraps cameleer3 agent + server.

8.2 MiB

Languages

Java 47.4%

TypeScript 23.4%

Shell 16.5%

PowerShell 11.3%

Dockerfile 0.7%

Other 0.7%