6 Commits

Include renames

Author	SHA1	Message	Date
Jeroen SchweitzerandClaude Opus 4.5	dd0997679f	fix: /auth/users/me now supports NPM forward auth headers ... Added get_current_user_or_forward_auth() combined dependency that: - First checks for X-authentik-* headers from NPM forward auth (web) - Falls back to JWT Bearer token validation (mobile/native) This fixes web authentication where browsers don't send Bearer tokens but rely on NPM's forward auth proxy to pass user info via headers. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-04 00:24:41 +01:00
Jeroen SchweitzerandClaude Opus 4.5	397a47c8fc	feat(auth): implement Phase 4 user profile and API key endpoints ... Add user profile, preferences, and API key management endpoints: - GET /auth/users/me - full user profile with roles and preferences - GET/PATCH /auth/users/me/preferences - user preferences management - GET/POST/DELETE /auth/users/me/api-keys - API key lifecycle API keys use tak_ prefix, SHA-256 hashing, and are shown only once on creation. Preferences support partial updates with JSON merge behavior. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-03 20:24:46 +01:00
Jeroen SchweitzerandClaude Opus 4.5	7752cd9d23	feat(auth): implement group-role mapping and permission system ... Architecture changes: - Permission format: domain.category:action (e.g., control-room.general:admin) - Decoupled groups from roles via group_roles mapping table - Groups are organizational (synced from Authentik) - Roles are permissions (admin-managed via API) New features: - require_permission() and require_any_permission() dependency factories - Action hierarchy: admin > editor > user > viewer - Global admin override (admin.general:admin grants all) - Group-role management endpoints (assign/remove roles) - GET /auth/roles endpoint to list all roles Database changes: - Added category column to roles table (default: general) - Removed authentik_group column (decoupled) - Added group_roles association table - Added user_groups association table - Migration updates role names to domain.general:action format Tests: - 67 new tests for auth service and controller - Covers token validation, user sync, role sync - Covers group-role assignment/removal - Covers schema conversions and permission system 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-03 19:52:10 +01:00
Jeroen SchweitzerandClaude Opus 4.5	075b0ec297	feat: add system stats API for dashboard monitoring ... - GET /tools/system/stats - Real-time host system statistics - CPU usage, memory, all mounted disks, network I/O - GPU/VRAM stats via nvidia-smi (if available) - Uses psutil for cross-platform host metrics - Auto-discovers and filters real filesystems 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-03 17:30:45 +01:00
Jeroen SchweitzerandClaude Opus 4.5	49be935b5d	feat: add link_type field to quick links ... Adds link_type column to quick_links table for iframe vs new_tab behavior. Includes Alembic migration and schema updates. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-03 14:38:10 +01:00
Jeroen SchweitzerandClaude Opus 4.5	381d43b60b	feat: add dashboard API with quick links and widgets ... - Dashboard domain with Quick Links CRUD + reorder endpoints - Dashboard widgets management endpoints - Database migrations for quick_links and dashboard_widgets tables - Static file controller for Organizr widgets - Default local user when OIDC is disabled - Domain-based architecture refactor (src/domains/, src/shared/) - Test suite updated for new structure (285 tests passing) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-03 12:27:57 +01:00