KEY-WP-0046: directory bind password from KEYCAPE_LLDAP_BIND_PW
#98 -Commit
e2b5fa1442
pushed by
tegwick
KEY-WP-0045: value-safe identity-facts export for NK-WP-0054-T04
#96 -Commit
a1ab8ff807
pushed by
tegwick
Bind online human ID tokens to the exact current access grant
#94 -Commit
e2c5a94782
pushed by
tegwick
Share current-token verification and scoped cleanup through one producer client
#92 -Commit
08c083bae9
pushed by
tegwick
Add opt-in issuer-owned access-token status and scoped revocation
#90 -Commit
67a0869c1e
pushed by
tegwick
Add KEY-WP-0041 for the NK-WP-0051-T02 sign-in diagnosis page.
#88 -Commit
44b2434100
pushed by
tegwick
Map explicit Railiance admin directory group for alert acknowledgment
#81 -Commit
1164f65d89
pushed by
tegwick
Send split-horizon origin headers on the discovery/JWKS fetch too
#79 -Commit
8be8065347
pushed by
tegwick
Don't backdate a fresh MFA to a stale kc_login cookie (INFD-IN-0005)
#77 -Commit
911e9de969
pushed by
tegwick
Format reviewed service registration tenant assertions
#75 -Commit
dd317b3135
pushed by
tegwick
Send the public origin on the in-cluster Authelia token request.
#73 -Commit
3b0446e0ef
pushed by
tegwick
Style the NetKingdom sign-out confirmation like the account site.
#71 -Commit
13afaa916d
pushed by
tegwick
Register informed-decision-sitting-requester as create-only.
#67 -Commit
1620ce2edd
pushed by
tegwick
Implement scoped P06 authentication policy and guarded optional onboarding
#65 -Commit
e0b3c25f06
pushed by
tegwick
Implement P05 checked services and safe selected delivery recovery
#63 -Commit
aa709fb854
pushed by
tegwick
Verify reader scope before accepting absence of enrolled factors
#55 -Commit
113f3a6296
pushed by
tegwick
Require confirmed enrollment and genuine OTP evidence for MFA
#53 -Commit
122a0d1369
pushed by
tegwick
Support provider credential renewal and reject unsuccessful OTP validation
#51 -Commit
632b1f1376
pushed by
tegwick
Support opt-in MFA per browser client with authoritative enrollment checks
#49 -Commit
ac8ed65203
pushed by
tegwick
Allow registered provider redirects after sign-out confirmation
#48 -Commit
4d8b8fe934
pushed by
tegwick
Preserve browser Origin on the confirmed sign-out form
#47 -Commit
91efb6d988
pushed by
tegwick
Add central login recovery and confirmed shared sign-out
#46 -Commit
074c2ce498
pushed by
tegwick
Forward fresh-login requirements to the authentication provider
#45 -Commit
8d4336e944
pushed by
tegwick
Carry the tenant claim's provenance, and correct a guard the ruling voided
#42 -Commit
63d646b594
pushed by
tegwick
Make the static-registration precondition a checked condition
#41 -Commit
5f516a0fbb
pushed by
tegwick