core-api

5 Commits

Include renames

Author	SHA1	Message	Date
Jeroen SchweitzerandClaude Opus 4.5	6243f29aae	feat: multi-issuer OIDC support with config consolidation Build and Push / release (push) Successful in 2s Details Build and Push / build (push) Successful in 1m15s Details - Support multiple OAuth providers (core-api, tatlock-ui, tatlock) - Changed oidc_issuer (string) to oidc_issuers (list) - Per-issuer JWKS caching - Validates token issuer against allowed list - Consolidated config files (removed deprecated src/config.py, src/security.py) - Updated imports to use src/shared/config and src/shared/security 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-08 13:09:29 +01:00
Jeroen SchweitzerandClaude Opus 4.5	6ce34cc016	fix: accept multiple OIDC audiences for cross-client auth Build and Push / release (push) Successful in 3s Details Build and Push / build (push) Successful in 1m15s Details - Changed oidc_audience (string) to oidc_audiences (list) - Now accepts tokens with audience: core-api, tatlock-ui, tatlock - Fixes environment endpoint returning "default" user when using tatlock-ui token (audience mismatch was causing JWT claims error) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-07 19:01:39 +01:00
Jeroen SchweitzerandClaude Opus 4.5	c1f16d44e5	refactor: remove Ollama integration and unused AI configuration Build and Push / release (push) Successful in 3s Details Build and Push / build (push) Successful in 1m19s Details - Remove src/models/ollama_client.py, embeddings.py, embeddings_ollama.py - Remove model aliases and AI config from settings (both config.py files) - Update health endpoints to only check database connectivity - Update tests to reflect database-only health checks - Update README, .env.example, and OIDC docstrings 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-07 17:56:48 +01:00
Jeroen SchweitzerandClaude Opus 4.5	7bf3c76a1b	fix(cors): use explicit origins instead of wildcard Build and Push / release (push) Successful in 3s Details Build and Push / build (push) Successful in 1m11s Details When allow_credentials=True, browsers reject wildcard (*) origins. Added specific allowed origins for Tatlock domains. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-03 23:09:47 +01:00
Jeroen SchweitzerandClaude Opus 4.5	381d43b60b	feat: add dashboard API with quick links and widgets Build and Push / build (release) Successful in 1m28s Details - Dashboard domain with Quick Links CRUD + reorder endpoints - Dashboard widgets management endpoints - Database migrations for quick_links and dashboard_widgets tables - Static file controller for Organizr widgets - Default local user when OIDC is disabled - Domain-based architecture refactor (src/domains/, src/shared/) - Test suite updated for new structure (285 tests passing) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-03 12:27:57 +01:00