Bernd Worsch a6af43b332 fix(authelia): use adapter's own client_id/redirect_uri in AuthorizeURL ... The adapter was forwarding the downstream client's client_id and redirect_uri to Authelia, which would always be rejected — Authelia only recognises client_id=keycape and its registered callback URI. Also removed downstream PKCE forwarding: KeyCape is a confidential OIDC client to Authelia and authenticates via client_secret instead. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-03-25 03:15:36 +00:00
..
cmd	feat: implement T22, T18, T23 — dev stack, profile tests, server binary	2026-03-13 02:18:36 +01:00
internal	fix(authelia): use adapter's own client_id/redirect_uri in AuthorizeURL	2026-03-25 03:15:36 +00:00
tests	feat: implement T19, T20 — Scenario B/C replacement tests; complete workplan	2026-03-13 02:36:29 +01:00
go.mod	feat: implement T14, T10 — enforcement middleware, LLDAP adapter	2026-03-13 01:45:21 +01:00
go.sum	feat: implement T14, T10 — enforcement middleware, LLDAP adapter	2026-03-13 01:45:21 +01:00
Makefile	feat: implement T01-T04 — Go module, canonical model, LDAP validator, error taxonomy	2026-03-13 01:27:54 +01:00