feat(authenticator): OIDC login + sessions + cookie-to-JWT exchange (nginx+auth step 04) - #1686

Merged

cyberantonz merged 12 commits into

constructorfabric:mainfrom

cyberantonz:nginx-authenticator-04

Jul 9, 2026

Commits on Jul 9, 2026

feat(authenticator): gear skeleton — OIDC login, sessions, cookie-to-JWT exchange

cyberantonz
and
claude
committed
e43a858
feat(authenticator): compose + helm + CI wiring, e2e loop, §9.6 decision

cyberantonz
and
claude
committed
18410e7
docs(authenticator): link bootstrap follow-up issue #1687 in code marker

cyberantonz
and
claude
committed
a40fe9c
fix(docker): add authenticator-sdk + authenticator manifests to sibling Dockerfiles

cyberantonz
and
claude
committed
c57da7a
refactor(authenticator): ephemeral dev signing key, canonical SDK errors, clarify api-gateway naming

cyberantonz
and
claude
committed
578bb4b
refactor(authenticator): drop first-admin bootstrap + RBAC (deferred)

cyberantonz
and
claude
committed
03da981
refactor(authenticator): latest deps, key-gen out of binary, SessionRecord + route-group cleanups

cyberantonz
and
claude
committed
e0be26c
fix(authenticator): address CodeRabbit review

cyberantonz
and
claude
committed
1677c08
chore(authenticator): drop unneeded dev-keys README

cyberantonz
and
claude
committed
60a2527
refactor(authenticator): LoginState owns its Redis mapping (to_fields/from_map)

cyberantonz
and
claude
committed
c5ca6b0
refactor(authenticator): use openidconnect crate for the OIDC flow; wire coverage gate

cyberantonz
and
claude
committed
ab97ab7
style(authenticator): cargo fmt

cyberantonz
and
claude
committed
d8a2cc8