opencode/yao
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
yao/openapi/oauth
History
Max e96896eb40 Implement detailed ACL enforcement logic and data access constraints 
- Refactored the ACL enforcement process to include a comprehensive chain of permission checks for clients, users, teams, and members.
- Introduced data access constraints (OwnerOnly, TeamOnly) to enhance access control based on endpoint requirements.
- Updated the Error struct to include the stage of permission checks where failures occur, improving error reporting.
- Enhanced scope management with wildcard matching capabilities and added checks for restricted scopes.
- Implemented tests to validate the enforcement logic and ensure correct handling of data access constraints.
2025-10-21 17:04:20 +08:00
..
acl Implement detailed ACL enforcement logic and data access constraints 2025-10-21 17:04:20 +08:00
authorized Implement detailed ACL enforcement logic and data access constraints 2025-10-21 17:04:20 +08:00
providers Update team model and creation logic to support role management 2025-10-20 17:00:33 +08:00
types Implement detailed ACL enforcement logic and data access constraints 2025-10-21 17:04:20 +08:00
client.go Update OAuth client configuration and ID generation methods 2025-08-04 11:04:56 +08:00
client_test.go Add scope field to dynamic client registration tests 2025-08-04 11:19:45 +08:00
core.go Enhance token generation and storage to support optional extra claims 2025-10-11 19:56:29 +08:00
core_test.go Enhance token generation and storage to support optional extra claims 2025-10-11 19:56:29 +08:00
device.go Remove deprecated OAuth interfaces and types 2025-07-17 17:19:22 +08:00
discovery.go Implement JWKS endpoint and enhance OAuth tests 2025-07-21 20:07:46 +08:00
ERRORS.md Add ACL support to OAuth guard and error handling 2025-10-18 09:22:35 +08:00
guard.go Refactor OAuth guard and ACL error handling for improved response structure 2025-10-20 16:23:12 +08:00
mcp.go Remove deprecated OAuth interfaces and types 2025-07-17 17:19:22 +08:00
oauth.go Refactor user provider methods to return string IDs and update test data handling 2025-08-03 10:25:09 +08:00
oauth_test.go Refactor test data handling for improved isolation and cleanup 2025-08-03 11:16:46 +08:00
security.go Implement dynamic client registration and enhance OAuth service functionality 2025-07-18 12:11:21 +08:00
security_test.go Refactor test data handling for improved isolation and cleanup 2025-08-03 11:16:46 +08:00
signing.go Add Yao user ID support in OIDC and token generation 2025-10-14 09:56:29 +08:00
TESTING_GUIDE.md Refactor test data handling for improved isolation and cleanup 2025-08-03 11:16:46 +08:00
token.go Enhance token generation and storage to support optional extra claims 2025-10-11 19:56:29 +08:00
token_test.go Enhance token generation and storage to support optional extra claims 2025-10-11 19:56:29 +08:00
user.go Add go-nanoid dependency and refactor user provider methods 2025-08-02 17:49:03 +08:00
user_test.go Refactor OAuth token management tests and remove deprecated methods 2025-07-21 18:59:26 +08:00