Open security core for dev sec ops on kubernetes
Find a file
tegwick d35823df08 feat(local-identity): Stage 3 — minimal native OIDC provider (NK-WP-0002-T03)
Add local-identity serve command: a minimal Authorization Code flow OIDC
server backed by file-store users.  Implemented natively with no heavy
OIDC library — only stdlib http.server and the cryptography package.

New modules:
  keys.py      RSA-2048 signing key generation + JWKS helpers
  tls.py       Self-signed TLS certificate (localhost/127.0.0.1 SANs)
  jwt_utils.py RS256 JWT creation and verification
  serve.py     OIDCHandler + make_handler() factory + run_server()

Endpoints: /.well-known/openid-configuration, /jwks, /auth, /token,
/userinfo.  Server binds to 127.0.0.1 only; tokens carry iss: local-identity
which production Keycloak rejects by design.

104 tests passing (16 new for Stage 3).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-02 01:05:50 +01:00
docs feat(local-identity): Stage 2 — Keycloak export & bootstrap integration (NK-WP-0002-T02) 2026-03-02 00:23:39 +01:00
local-identity feat(local-identity): Stage 3 — minimal native OIDC provider (NK-WP-0002-T03) 2026-03-02 01:05:50 +01:00
wiki Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
workplans feat(local-identity): Stage 3 — minimal native OIDC provider (NK-WP-0002-T03) 2026-03-02 01:05:50 +01:00
.gitignore Initial commit 2026-02-28 09:41:41 +00:00
CLAUDE.md Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
DECISIONS.md docs(workplan): update NK-WP-0001 with resolved decisions D1/D2/D3 2026-03-01 22:51:11 +01:00
LICENSE Initial commit 2026-02-28 09:41:41 +00:00
README.md Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00

NetKingdom

NetKingdom provides a dynamic self optimizing full circle security-platform for kubernetes deployed IT-infrastructures.