Repository navigation

Spike: Auth S2 (only API permissions, no resource scopes) - #5499

Closed

ramonsmits wants to merge 32 commits into

Particular:masterfrom

ramonsmits:tf3651-authz-s2

Closed

Spike: Auth S2 (only API permissions, no resource scopes)#5499
ramonsmits wants to merge 32 commits into
Particular:masterfrom
ramonsmits:tf3651-authz-s2

Commits on May 22, 2026
- 👷 Add YamlDotNet package for the RBAC policy file
  ramonsmits
  committed
  032a033
- ✨ Add Authentication.RbacPolicyFile setting
  ramonsmits
  committed
  62ab4a6
- ✨ Add RBAC policy model types
  ramonsmits
  committed
  abd2a28
- ✨ Add rbac.yaml loader and default policy file
  ramonsmits
  committed
  d56b01e
- ✨ Add resource-scope pattern matching
  ramonsmits
  committed
  ca62f0d
- ✨ Flatten Keycloak realm_access roles into claims
  ramonsmits
  committed
  0eb84e6
- ✨ Add IPermissionEvaluator
  ramonsmits
  committed
  48088e9
- ✨ Add permission catalogue
  ramonsmits
  committed
  e1cccad
- ✅ Address RBAC foundation review findings
  ramonsmits
  committed
  4ed9de0
- ✨ Add authorization-decision audit logging
  ramonsmits
  committed
  4f64eae
- ✨ Add descriptor endpoint, authorization wiring, and completeness test (tasks 0.12–0.14)
  ramonsmits
  committed
  a2d98b0
- ✅ Complete the Phase 0 endpoint baseline
  ramonsmits
  committed
  7c1a9d3
- 🐛 Fix code-review findings: 404 on auth-disabled, grant dedup, naming cleanup
  ramonsmits
  committed
  269b0cb
Commits on May 28, 2026