Repository navigation

Keycloak sso - #66

Merged

rvirtaha merged 28 commits into

mainfrom

keycloak-sso

Aug 14, 2026

Merged

Keycloak sso#66
rvirtaha merged 28 commits into
mainfrom
keycloak-sso

Commits on Aug 9, 2026
- chore: pin pnpm version via packageManager
  
  rvirtaha
  and
  claude
  committed
  eab801c
- chore: add openid-client, swap PRODEKO_OAUTH env for KEYCLOAK
  rvirtaha
  committed
  e0f8b64
- feat: keycloak claim mapping and redirect sanitization
  rvirtaha
  committed
  a3030ea
- feat: keycloak oidc login route with lazy discovery
  
  rvirtaha
  and
  claude
  committed
  4215e77
- feat: keycloak oidc callback with is_admin restamp and locale cookie
  
  rvirtaha
  and
  claude
  committed
  b85e48c
- fix: unlink keycloak identity when a login hits a break-glass account
  
  rvirtaha
  and
  claude
  committed
  d5d0177
- feat: mount keycloak sso, remove legacy prodeko oauth strategy
  rvirtaha
  committed
  9a210c8
- feat: ssoLoginEnabled query, logout redirectTo, remove register mutation
  
  rvirtaha
  and
  claude
  committed
  12d5ecf
- feat: regen graphql artifacts, drop client registration
  
  rvirtaha
  and
  claude
  committed
  f680b41
- style: apply prettier to keycloak util tests
  
  rvirtaha
  and
  claude
  committed
  ff9dde0
- feat: sso-only login page with hidden break-glass, sso logout redirect
  
  rvirtaha
  and
  claude
  committed
  9364ff6
- test: e2e coverage for sso-only login and break-glass entry
  
  rvirtaha
  and
  claude
  committed
  16e4552
- docs: keycloak sso operator guide
  rvirtaha
  committed
  89789e8
- fix: reject backslash and control-char open redirects in next
  
  rvirtaha
  and
  claude
  committed
  db6a2c0
- test: cover the sso logout redirect chain end to end
  
  rvirtaha
  and
  claude
  committed
  5f310c8
- test: run the login chain against an sso-enabled server in ci
  
  rvirtaha
  and
  claude
  committed
  6e66d41
- chore: drop leftovers from the removed registration flow
  
  rvirtaha
  and
  claude
  committed
  d3b0793
- docs: correct the break-glass entry point and note admin re-stamp on linking
  
  rvirtaha
  and
  claude
  committed
  a12ccac
- fix: require an explicit same-origin link intent and run the callback in one transaction
  
  rvirtaha
  and
  claude
  committed
  af7dba7
- fix: keep logout working when the keycloak pre-step fails
  
  rvirtaha
  and
  claude
  committed
  f3ac714
- fix: consume the shared sso module on the client and surface local sign-in on outage
  
  rvirtaha
  and
  claude
  committed
  aac9efd
- test: run a happy-path login against a real keycloak in ci
  
  rvirtaha
  and
  claude
  committed
  69336b7
- docs: correct the admin claims, document the error codes and linking flow
  
  rvirtaha
  and
  claude
  committed
  009cbf6
- ci: drop the duplicate pnpm version pin and move actions off the node20 runtime
  
  rvirtaha
  and
  claude
  committed
  b740c0f
- fix: scope the jest js transform to the three esm openid packages
  
  rvirtaha
  and
  claude
  committed
  a78f21b
- fix: harden the sso flow against the review findings
  
  rvirtaha
  and
  claude
  committed
  06f9645
- docs: reconcile the operator guide with the code and the ci realm
  
  rvirtaha
  and
  claude
  committed
  16361df
Commits on Aug 10, 2026
- style: run prettier
  rvirtaha
  committed
  11b3b80

Commits

Commits on Aug 9, 2026

Commits on Aug 10, 2026