fix(auth): disable ROPC and propose product-rendered passkey ceremonies - #128

Draft

seonghobae wants to merge 23 commits into

codex/keyverse-orchestrator-free-developmentfrom

feat/naruon-direct-access-grants-exception

Commits on Sep 2, 2026

feat(realm): scoped Direct Access Grants exception for naruon-web only

seonghobae
and
claude
committed
5404dd0
feat(registration): scoped password-credential issuance for naruon signup

seonghobae
and
claude
committed
5661b3d

Commits on Sep 3, 2026

fix(registration): clear required actions on new password accounts

seonghobae
and
claude
committed
7c1939d
docs(adr): correct ADR-0014 with the RFC 9700/10017 ROPC prohibition finding

seonghobae
and
claude
committed
c97f333
docs(relying-party): expand validate_relying_party_registration's docstring

seonghobae
and
claude
committed
0ddcad6
fix(adr-0014): disable directAccessGrantsEnabled, fix stale index status

seonghobae
and
claude
committed
79fe43d
fix(adr-0015): fail closed password registration, guard realm regression

seonghobae
and
claude
committed
44f0cb9
docs(adr-0014/0015): OpenAPI accuracy, changelog, operability, doctoring record

seonghobae
and
claude
committed
86de970
test(auth): reject cleartext Keycloak admin URLs
seonghobae
committed
31a21ca
test(auth): use TLS origins in product transport fixtures
seonghobae
committed
c2a5013
test(auth): cover Keycloak origin validation edges
seonghobae
committed
7deedf0
fix(auth): enforce TLS on product Keycloak transport
seonghobae
committed
cd0e435
test(auth): require seed-time password token revocation
seonghobae
committed
70c8004
fix(auth): revoke omitted password registration token
seonghobae
committed
f6912b1
test(auth): require seed-time signup token revocation
seonghobae
committed
10f28e7
fix(auth): revoke omitted registration token
seonghobae
committed
5f61cab
docs(product-keycloak-client): flag reset_password as dormant capability

seonghobae
and
claude
committed
6ffef10

Commits on Sep 5, 2026

Merge remote-tracking branch 'origin/codex/keyverse-orchestrator-free-development' into codex/pr128-restack
seonghobae
committed
e1cf080

Commits on Sep 7, 2026

docs(auth): propose product-rendered passkey ceremonies
seonghobae
committed
f893ec6