4 Commits

Include renames

Author	SHA1	Message	Date
Jeroen SchweitzerandClaude Opus 4.5	3bb3b01dbd	fix: OIDC audience validation - use string not list ... python-jose jwt.decode() requires audience as string or None, not list. Now extract and validate audience from unverified claims first, then use token's actual audience for JWT decode. Fixes "audience must be a string or None" error. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-08 15:35:05 +01:00
Jeroen SchweitzerandClaude Opus 4.5	6243f29aae	feat: multi-issuer OIDC support with config consolidation ... - Support multiple OAuth providers (core-api, tatlock-ui, tatlock) - Changed oidc_issuer (string) to oidc_issuers (list) - Per-issuer JWKS caching - Validates token issuer against allowed list - Consolidated config files (removed deprecated src/config.py, src/security.py) - Updated imports to use src/shared/config and src/shared/security 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-08 13:09:29 +01:00
Jeroen SchweitzerandClaude Opus 4.5	6ce34cc016	fix: accept multiple OIDC audiences for cross-client auth ... - Changed oidc_audience (string) to oidc_audiences (list) - Now accepts tokens with audience: core-api, tatlock-ui, tatlock - Fixes environment endpoint returning "default" user when using tatlock-ui token (audience mismatch was causing JWT claims error) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-07 19:01:39 +01:00
jpmschweitzer	488a4e8a91	Initial commit: core-api service extraction from portainer-core	2025-12-11 15:52:59 +01:00