hsiegeln f4eafd9a0f feat: sync OIDC roles on every login, not just first ...

Roles from the id_token's rolesClaim are now diffed against stored
system roles on each OIDC login. Missing roles are added, revoked
roles are removed. Group memberships (manually assigned) are never
touched. This propagates scope revocations from the OIDC provider
on next user login.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 10:11:06 +02:00

.gitea/workflows

ci: replace Authentik with Logto in deployment pipeline

2026-04-05 13:12:38 +02:00

.planning

Update docs for RBAC, OIDC, and user management

2026-03-14 12:41:41 +01:00

.playwright-mcp

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

.superpowers/brainstorm

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

cameleer3-server-app

feat: sync OIDC roles on every login, not just first

2026-04-06 10:11:06 +02:00

cameleer3-server-core

feat: update default rolesClaim to 'roles' for Logto compatibility

2026-04-05 13:10:53 +02:00

deploy

fix: use tcpSocket probe for logto-postgresql instead of pg_isready

2026-04-05 13:44:59 +02:00

docs

docs: document server:-prefixed scopes and case-insensitive role mapping

2026-04-06 10:06:11 +02:00

examples

added RBAC mock and spec to examples

2026-03-17 16:21:25 +01:00

org/eclipse/elk

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

screenshots

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

ui

fix: replace last hardcoded paths with BASE_PATH-aware alternatives

2026-04-06 09:53:00 +02:00

.dockerignore

Add Docker build, K8s manifests, and CI/CD deploy pipeline

2026-03-12 19:01:39 +01:00

.gitattributes

Scaffold cameleer3-server project structure

2026-03-11 10:06:17 +01:00

.gitignore

chore: add .worktrees/ to .gitignore for worktree isolation

2026-03-27 18:27:34 +01:00

ci-log2.txt

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

ci-log.txt

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

CLAUDE.md

docs: document server:-prefixed scopes and case-insensitive role mapping

2026-04-06 10:06:11 +02:00

docker-compose.yml

feat: remove TimescaleDB, dead PG stores, and storage feature flags

2026-04-01 20:10:58 +02:00

Dockerfile

feat: remove OpenSearch, add ClickHouse admin page

2026-04-01 18:56:06 +02:00

HOWTO.md

docs: document server:-prefixed scopes and case-insensitive role mapping

2026-04-06 10:06:11 +02:00

openapi.json

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

pom.xml

chore: upgrade cameleer3-common to 1.0-SNAPSHOT and enable snapshot resolution

2026-03-25 08:04:29 +01:00

UI_FINDINGS.md

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

Description

Observability server for Cameleer agents

25 MiB

Languages

Java 61.6%

TypeScript 30.2%

HTML 5.2%

CSS 2.9%