hsiegeln 67b35a25d6 feat: configure Logto Custom JWT and update server OIDC rolesClaim ...

- Change rolesClaim from "scope" to "roles" to match the custom claim
  injected by the Logto Custom JWT script
- Add Phase 7b: configure Logto Custom JWT for access tokens that maps
  org roles (admin→server:admin, member→server:viewer) and global roles
  (platform-admin→server:admin) into a standard "roles" claim
- Add additionalScopes field to OIDC config

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-07 10:17:04 +02:00

.gitea/workflows

fix: restore registry-based Docker layer caching in CI

2026-04-06 23:10:55 +02:00

.mvn/wrapper

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

docker

feat: configure Logto Custom JWT and update server OIDC rolesClaim

2026-04-07 10:17:04 +02:00

docs

docs: update architecture for custom sign-in UI and CI pipeline

2026-04-06 16:29:37 +02:00

src

feat: use cameleer3-logo.svg from design-system v0.1.36 everywhere

2026-04-06 23:03:18 +02:00

ui

chore: bump @cameleer/design-system to 0.1.37

2026-04-06 23:34:35 +02:00

.env.example

fix: register API resource in Logto for JWT access tokens

2026-04-05 01:01:32 +02:00

.gitattributes

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

.gitignore

feat: use cameleer3-logo.svg from design-system v0.1.36 everywhere

2026-04-06 23:03:18 +02:00

CLAUDE.md

fix: security hardening — remove dead routes, add JWT audience validation

2026-04-06 19:15:03 +02:00

docker-compose.dev.yml

feat: HTTPS admin console via Traefik with NODE_TLS_REJECT_UNAUTHORIZED

2026-04-07 00:44:33 +02:00

docker-compose.yml

fix: explicitly set service=logto on default tenant router

2026-04-07 00:56:10 +02:00

Dockerfile

perf: add BuildKit cache mounts for Maven and npm in Docker builds

2026-04-06 22:29:14 +02:00

HOWTO.md

feat: add SPA controller, Traefik route, CI frontend build, and HOWTO update

2026-04-04 22:06:36 +02:00

mvnw

fix: set execute permission on Maven wrapper

2026-04-04 15:34:52 +02:00

mvnw.cmd

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

pom.xml

feat: add Phase 3 dependencies and configuration

2026-04-04 17:29:06 +02:00

STRATEGY.md

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

traefik.yml

feat: HTTPS admin console via Traefik with NODE_TLS_REJECT_UNAUTHORIZED

2026-04-07 00:44:33 +02:00

Description

Multi-tenant SaaS platform — Camel application runtime with built-in observability. Wraps cameleer3 agent + server.

8.2 MiB

Languages

Java 47.4%

TypeScript 23.4%

Shell 16.5%

PowerShell 11.3%

Dockerfile 0.7%

Other 0.7%