hsiegeln c502a42f17 refactor: architecture cleanup — OIDC dedup, PKCE, K8s hardening ...

- Extract OidcProviderHelper for shared discovery + JWK source construction
- Add SystemRole.normalizeScope() to centralize role normalization
- Merge duplicate claim extraction in OidcTokenExchanger
- Add PKCE (S256) to OIDC authorization flow (frontend + backend)
- Add SecurityContext (runAsNonRoot) to all K8s deployments
- Fix postgres probe to use $POSTGRES_USER instead of hardcoded username
- Remove default credentials from Dockerfile
- Extract sanitize_branch() to shared .gitea/sanitize-branch.sh
- Fix sidebar to use /exchanges/ paths directly, remove legacy redirects
- Centralize basePath computation in router.tsx via config module

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 21:57:29 +02:00

.gitea

refactor: architecture cleanup — OIDC dedup, PKCE, K8s hardening

2026-04-06 21:57:29 +02:00

.planning

Update docs for RBAC, OIDC, and user management

2026-03-14 12:41:41 +01:00

.playwright-mcp

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

.superpowers/brainstorm

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

cameleer3-server-app

refactor: architecture cleanup — OIDC dedup, PKCE, K8s hardening

2026-04-06 21:57:29 +02:00

cameleer3-server-core

refactor: architecture cleanup — OIDC dedup, PKCE, K8s hardening

2026-04-06 21:57:29 +02:00

deploy

refactor: architecture cleanup — OIDC dedup, PKCE, K8s hardening

2026-04-06 21:57:29 +02:00

docs

docs: update Config tab navigation behavior and role gating

2026-04-06 16:29:20 +02:00

examples

added RBAC mock and spec to examples

2026-03-17 16:21:25 +01:00

org/eclipse/elk

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

screenshots

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

ui

refactor: architecture cleanup — OIDC dedup, PKCE, K8s hardening

2026-04-06 21:57:29 +02:00

.dockerignore

Add Docker build, K8s manifests, and CI/CD deploy pipeline

2026-03-12 19:01:39 +01:00

.gitattributes

Scaffold cameleer3-server project structure

2026-03-11 10:06:17 +01:00

.gitignore

chore: add .worktrees/ to .gitignore for worktree isolation

2026-03-27 18:27:34 +01:00

ci-log2.txt

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

ci-log.txt

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

CLAUDE.md

docs: update Config tab navigation behavior and role gating

2026-04-06 16:29:20 +02:00

docker-compose.yml

feat: remove TimescaleDB, dead PG stores, and storage feature flags

2026-04-01 20:10:58 +02:00

Dockerfile

refactor: architecture cleanup — OIDC dedup, PKCE, K8s hardening

2026-04-06 21:57:29 +02:00

HOWTO.md

docs: update Config tab navigation behavior and role gating

2026-04-06 16:29:20 +02:00

openapi.json

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

pom.xml

chore: upgrade cameleer3-common to 1.0-SNAPSHOT and enable snapshot resolution

2026-03-25 08:04:29 +01:00

UI_FINDINGS.md

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

Description

Observability server for Cameleer agents

25 MiB

Languages

Java 61.6%

TypeScript 30.2%

HTML 5.2%

CSS 2.9%