hsiegeln cba420fbeb fix: always offer MFA+passkey enrollment, separate availability from enforcement ...

Two fundamental fixes:

- user.missing_mfa now triggers MfaEnrollmentError (enroll UI) instead
  of MfaRequiredError (verify UI). Users without MFA were shown a TOTP
  code prompt they couldn't fill.
- Logto MFA factors always set to [Totp, WebAuthn, BackupCode] with
  UserControlled policy on startup. Availability is always-on for all
  users. The vendor auth policy controls enforcement (via
  MfaEnforcementFilter), not what Logto offers during sign-in.
- Removed syncMfaConfigToLogto from VendorAuthPolicyController — vendor
  policy changes no longer modify Logto's sign-in experience.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-27 18:59:21 +02:00

.gitea/workflows

fix(ci): force SNAPSHOT updates in build job Maven command

2026-04-26 20:58:06 +02:00

.mvn/wrapper

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

audit

chore: rename cameleer3 to cameleer

2026-04-15 15:28:44 +02:00

audit-screenshots

chore: rename cameleer3 to cameleer

2026-04-15 15:28:44 +02:00

docker

feat: add passkey_enrolled and mfa_method_preference to Custom JWT claims

2026-04-27 08:44:42 +02:00

docs

docs: implementation plan for vendor admin management and account settings

2026-04-27 14:32:46 +02:00

installer @ 531a17397b

fix: bootstrap extracts username from admin email for Logto

2026-04-25 21:03:54 +02:00

src

fix: always offer MFA+passkey enrollment, separate availability from enforcement

2026-04-27 18:59:21 +02:00

ui

fix: always offer MFA+passkey enrollment, separate availability from enforcement

2026-04-27 18:59:21 +02:00

.env.example

feat: unify admin identity — SAAS_ADMIN_USER is the email in SaaS mode

2026-04-25 20:46:24 +02:00

.gitattributes

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

.gitignore

chore(installer): remove generated install output, add to gitignore

2026-04-15 21:09:30 +02:00

.gitmodules

refactor: move installer to dedicated repo, wire as git submodule

2026-04-25 12:59:44 +02:00

AGENTS.md

fix: move forgot password link below sign-in button

2026-04-27 16:06:36 +02:00

ci-docker-log.txt

chore: rename cameleer3 to cameleer

2026-04-15 15:28:44 +02:00

CLAUDE.md

docs: update CLAUDE.md for account package, vendor admins, and shared components

2026-04-27 15:09:41 +02:00

docker-compose.yml

refactor: move installer to dedicated repo, wire as git submodule

2026-04-25 12:59:44 +02:00

Dockerfile

fix: force SNAPSHOT updates in Docker build to resolve stale cache

2026-04-26 20:55:41 +02:00

HOWTO.md

chore: rename cameleer3 to cameleer

2026-04-15 15:28:44 +02:00

mvnw

fix: set execute permission on Maven wrapper

2026-04-04 15:34:52 +02:00

mvnw.cmd

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

pom.xml

fix: add Gitea Maven repository for cameleer-license-minter resolution

2026-04-26 19:31:27 +02:00

STRATEGY.md

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

Description

Multi-tenant SaaS platform — Camel application runtime with built-in observability. Wraps cameleer3 agent + server.

9.4 MiB

Languages

Java 55.8%

TypeScript 34.7%

Shell 6.1%

HTML 2%

CSS 0.8%

Other 0.6%