2 commits

Author	SHA1	Message	Date
tegwick	fa27adbc77	feat: implement T16, T17 — Keycloak realm import transformer, LDIF generator ... - T16: canonical → Keycloak realm JSON (profile-safe: no identity brokering, implicit flow always false) - T17: canonical → LDIF for openldap/389ds/ad targets with pre-validation 27 migration tests pass. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-13 02:13:04 +01:00
tegwick	3ee8090a98	feat: implement T09, T15, T21 — userinfo endpoint, LLDAP export, negative tests ... - T09: /userinfo with RS256 JWT validation, scope-filtered claims - T15: LLDAP→canonical export tool with validation, migration_event telemetry - T21: Negative test suite (Scenario D) — all 7 unsupported features verified All go tests passing. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-13 02:08:03 +01:00