11 Commits

Include renames

Author	SHA1	Message	Date
Latte	87f048cc4d	fix: quota pending sign-ins and registrations per address, keep young clients, write the store off the loop (SEC-09)	2026-10-14 17:32:03 +02:00
Latte	f57c237bed	fix: rate limit /token and /revoke, bucket IPv6 by /64 and warn about untrusted forwarded headers (SEC-08)	2026-10-14 17:29:12 +02:00
Latte	782d416e46	fix: require a matching Origin on consent and name the binding cookie per flow (SEC-17, SEC-19)	2026-10-14 17:26:52 +02:00
Latte	8be859243d	fix: add OAUTH_REDIRECT_ALLOWLIST for client registration and waive the open default (SEC-05)	2026-10-14 17:24:41 +02:00
Latte	79aa4f7fc0	fix: load ./.env only when private and owned, add --env-file and AEGIS_ENV_FILE (SEC-04)	2026-10-14 17:22:29 +02:00
Latte	43eebd3089	fix: write-ahead audit entry so calls stop when the audit log stops accepting writes (SEC-03)	2026-10-14 17:11:53 +02:00
Latte	5baf73f38b	docs: security threat model and review findings	2026-10-14 17:04:47 +02:00
LatteandClaude Opus 4.8	385b442b6f	docs: local vs server quickstart, authz model, packaging ... Reframe the README around two transports and add a local stdio quickstart with uvx/pip and Claude Desktop / Claude Code wiring. New docs: local-quickstart.md and packaging.md (uv build/publish). Document resource-type-aware authorization and classified gitea_request in security.md; stdio env vars + audit-log fallback in configuration.md; local install in deployment.md; core+adapters in architecture.md. Add the missing root AGENTS.md contract, update CLAUDE.md with the core/adapter layout, fail-closed invariants, and the branching flow (HEAD -> feature -> dev -> main). Update roadmap/todo and .env.example. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-27 11:17:01 +02:00
Latte	59e1ea53a8	Add OAuth2/OIDC per-user Gitea authentication ... Introduce a GiteaOAuthValidator for JWT and userinfo validation and fallbacks, add /oauth/token proxy, and thread per-user tokens through the request context and automation paths. Update config and .env.example for OAuth-first mode, add OpenAPI, extensive unit/integration tests, GitHub/Gitea CI workflows, docs, and lint/test enforcement (>=80% cov).	2026-02-25 16:54:01 +01:00
Latte	5969892af3	feat: harden gateway with policy engine, secure tools, and governance docs	2026-02-14 16:06:43 +01:00
matsv	e17d34e6d7	docs: Add documentation site and API reference	2026-02-13 15:12:14 +01:00