Skip to content

Feat/OIDC 001 auth contracts#5

Merged
simonhagger merged 24 commits intomainfrom
feat/oidc-001-auth-contracts
Feb 12, 2026
Merged

Feat/OIDC 001 auth contracts#5
simonhagger merged 24 commits intomainfrom
feat/oidc-001-auth-contracts

Conversation

@simonhagger
Copy link
Owner

@simonhagger simonhagger commented Feb 12, 2026

Summary

Checklist

  • Conventional Commit title used
  • Unit/integration tests added or updated
  • A11y impact reviewed
  • I18n impact reviewed
  • IPC contract changes documented
  • ADR added/updated for architecture-level decisions

Security (Required For Sensitive Changes)

  • Security review completed
  • Threat model updated or N/A explained

Security Notes

  • N/A rationale (when no threat model update is needed):

@simonhagger
test(runtime): add Electron smoke guard for renderer diagnostics
f908234
@simonhagger
feat(contracts): add auth IPC contract schemas for OIDC phase 1
83e037b
@simonhagger
feat(desktop): add auth IPC channels and preload/main stubs
83ac001
@simonhagger
feat(auth): implement OIDC PKCE flow with secure token storage
9d71e0d
@simonhagger
feat(api): support OIDC session token auth in gateway
e5fb650
@simonhagger
feat(renderer): include auth session probe in IPC diagnostics
5bfee5d
@simonhagger
docs(readme): document OIDC env setup and runtime behavior
d50cee4
@simonhagger
chore(devx): auto-load .env.local for desktop dev on Windows
183634d
@simonhagger
fix(auth): bridge clerk sign-in redirect route for desktop OIDC
927dce1
@simonhagger
fix(auth): use extended IPC timeout for interactive sign-in flow
540e920
@simonhagger
fix(auth): redirect sign-in bridge to Clerk hosted sign-in page
bc23b65
@simonhagger
fix(auth): prevent redundant sign-in and avoid full session UI lock
e275095
@simonhagger
feat(auth): add token diagnostics IPC and dev-only session diagnostic…
4c73ba9 
…s UI
@simonhagger
docs(security): track temporary audience compatibility and sanitize i…
daedb84 
…dentifiers
@simonhagger
test(security): add API auth regression cases for oidc audience valid…
59c01af 
…ation
@simonhagger
chore(git): tighten ignore rules for env and test artifacts
11d9f71
@simonhagger
chore(workspace): commit remaining catch-up updates
340a6e4
@simonhagger
docs(governance): add backlog item for IdP global sign-out hardening
2fb1049
@simonhagger
fix(auth): dedupe token refresh and revoke refresh token on sign-out
623eea6
@simonhagger
feat(diagnostics): expose electron runtime versions in IPC diagnostics
7dd8f7e
@simonhagger
fix(diagnostics): source app metadata version from package metadata
553e517
@simonhagger
feat(auth): add jwt route guards with safe post-login return routing
bb6c8f5
@simonhagger
feat(desktop): add build flavors, labs nav toggle, and docs updates
d67ae35
@simonhagger
chore(ci): exclude lockfile from prettier format checks
4dc791a
@simonhagger simonhagger merged commit 595de2b into main Feb 12, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@simonhagger