hsiegeln 1ef8c9dceb refactor: merge tenant isolation into single HandlerInterceptor ...

Replace TenantResolutionFilter + TenantOwnershipValidator (15 manual
calls across 5 controllers) with a single TenantIsolationInterceptor
that uses Spring HandlerMapping path variables for fail-closed tenant
isolation. New endpoints with {tenantId}, {environmentId}, or {appId}
path variables are automatically isolated without manual code.

Simplify OrgResolver from dual-token fetch to single token — Logto
merges all scopes into either token type.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-05 15:48:04 +02:00

.gitea/workflows

fix: use standard dist/ output for Vite, copy to static/ explicitly

2026-04-04 23:44:50 +02:00

.mvn/wrapper

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

docker

feat: auth hardening — scope enforcement, tenant isolation, and docs

2026-04-05 15:32:53 +02:00

docs

refactor: merge tenant isolation into single HandlerInterceptor

2026-04-05 15:48:04 +02:00

src

refactor: merge tenant isolation into single HandlerInterceptor

2026-04-05 15:48:04 +02:00

ui

refactor: merge tenant isolation into single HandlerInterceptor

2026-04-05 15:48:04 +02:00

.env.example

fix: register API resource in Logto for JWT access tokens

2026-04-05 01:01:32 +02:00

.gitattributes

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

.gitignore

chore: add .worktrees to .gitignore

2026-04-04 17:26:22 +02:00

CLAUDE.md

refactor: merge tenant isolation into single HandlerInterceptor

2026-04-05 15:48:04 +02:00

docker-compose.dev.yml

feat: auth hardening — scope enforcement, tenant isolation, and docs

2026-04-05 15:32:53 +02:00

docker-compose.yml

infra: remove ForwardAuth, keys mount, add OIDC env vars for server

2026-04-05 12:44:04 +02:00

Dockerfile

fix: use standard dist/ output for Vite, copy to static/ explicitly

2026-04-04 23:44:50 +02:00

HOWTO.md

feat: add SPA controller, Traefik route, CI frontend build, and HOWTO update

2026-04-04 22:06:36 +02:00

mvnw

fix: set execute permission on Maven wrapper

2026-04-04 15:34:52 +02:00

mvnw.cmd

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

pom.xml

feat: add Phase 3 dependencies and configuration

2026-04-04 17:29:06 +02:00

STRATEGY.md

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

traefik.yml

feat: add Docker Compose production stack with Traefik + Logto

2026-04-04 15:09:49 +02:00

Description

Multi-tenant SaaS platform — Camel application runtime with built-in observability. Wraps cameleer3 agent + server.

8.2 MiB

Languages

Java 47.4%

TypeScript 23.4%

Shell 16.5%

PowerShell 11.3%

Dockerfile 0.7%

Other 0.7%