hsiegeln 67b35a25d6 feat: configure Logto Custom JWT and update server OIDC rolesClaim ...

- Change rolesClaim from "scope" to "roles" to match the custom claim
  injected by the Logto Custom JWT script
- Add Phase 7b: configure Logto Custom JWT for access tokens that maps
  org roles (admin→server:admin, member→server:viewer) and global roles
  (platform-admin→server:admin) into a standard "roles" claim
- Add additionalScopes field to OIDC config

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-07 10:17:04 +02:00

..

runtime-base

feat: update Docker Compose, CI, and add runtime-base Dockerfile

2026-04-04 18:04:42 +02:00

clickhouse-init.sql

fix: Docker Compose database initialization

2026-04-04 23:37:19 +02:00

clickhouse-users.xml

fix: allow ClickHouse connections from Docker network

2026-04-04 23:41:14 +02:00

init-databases.sh

fix: Docker Compose database initialization

2026-04-04 23:37:19 +02:00

logto-bootstrap.sh

feat: configure Logto Custom JWT and update server OIDC rolesClaim

2026-04-07 10:17:04 +02:00

server-ui-entrypoint.sh

fix: patch server-ui entrypoint to fix sed ordering bug

2026-04-05 23:53:03 +02:00

traefik-dynamic.yml

fix: root → /platform/ redirect via Traefik file config

2026-04-05 23:30:38 +02:00