Feat/OIDC 001 auth contracts#5

Merged

simonhagger merged 24 commits intomainfrom

feat/oidc-001-auth-contracts

Feb 12, 2026

Commits on Feb 12, 2026

test(runtime): add Electron smoke guard for renderer diagnostics
simonhagger
committed
feat(contracts): add auth IPC contract schemas for OIDC phase 1
simonhagger
committed
feat(desktop): add auth IPC channels and preload/main stubs
simonhagger
committed
feat(auth): implement OIDC PKCE flow with secure token storage
simonhagger
committed
feat(api): support OIDC session token auth in gateway
simonhagger
committed
feat(renderer): include auth session probe in IPC diagnostics
simonhagger
committed
docs(readme): document OIDC env setup and runtime behavior
simonhagger
committed
chore(devx): auto-load .env.local for desktop dev on Windows
simonhagger
committed
fix(auth): bridge clerk sign-in redirect route for desktop OIDC
simonhagger
committed
fix(auth): use extended IPC timeout for interactive sign-in flow
simonhagger
committed
fix(auth): redirect sign-in bridge to Clerk hosted sign-in page
simonhagger
committed
fix(auth): prevent redundant sign-in and avoid full session UI lock
simonhagger
committed
feat(auth): add token diagnostics IPC and dev-only session diagnostics UI
simonhagger
committed
docs(security): track temporary audience compatibility and sanitize identifiers
simonhagger
committed
test(security): add API auth regression cases for oidc audience validation
simonhagger
committed
chore(git): tighten ignore rules for env and test artifacts
simonhagger
committed
chore(workspace): commit remaining catch-up updates
simonhagger
committed
docs(governance): add backlog item for IdP global sign-out hardening
simonhagger
committed
fix(auth): dedupe token refresh and revoke refresh token on sign-out
simonhagger
committed
feat(diagnostics): expose electron runtime versions in IPC diagnostics
simonhagger
committed
fix(diagnostics): source app metadata version from package metadata
simonhagger
committed
feat(auth): add jwt route guards with safe post-login return routing
simonhagger
committed
feat(desktop): add build flavors, labs nav toggle, and docs updates
simonhagger
committed
chore(ci): exclude lockfile from prettier format checks
simonhagger
committed