5 commits

Author	SHA1	Message	Date
tegwick	e8b4eded88	Map explicit tenant groups into OIDC claims	2026-07-28 00:34:19 +02:00
tegwick	d6d41dd84f	Fix OpenBao OIDC token exchange compatibility	2026-06-01 21:20:54 +02:00
tegwick	06d20c3379	Load LLDAP organizational unit config	2026-05-25 00:28:33 +02:00
tegwick	3ee8090a98	feat: implement T09, T15, T21 — userinfo endpoint, LLDAP export, negative tests ... - T09: /userinfo with RS256 JWT validation, scope-filtered claims - T15: LLDAP→canonical export tool with validation, migration_event telemetry - T21: Negative test suite (Scenario D) — all 7 unsupported features verified All go tests passing. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-13 02:08:03 +01:00
tegwick	b0adbc5daa	feat: implement T14, T10 — enforcement middleware, LLDAP adapter ... - T14: Unsupported feature registry with 7 pre-registered profile boundaries - T10: LLDAP adapter implementing UserRepository; validator-gated reads 24 tests pass, go vet clean. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-13 01:45:21 +01:00