| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
【Sync】同步IAM组件代码 | 8 个月前 | |
refactor: 组件间通信支持自定义AKSK双因子认证 支持开发者通过自定义配置 AKSK 密钥对，便于灵活接入不同的密钥管理与轮转策略。 Refs: issue #28 Signed-off-by: slichengsong <slicheng.song@huawei.com> | 5 个月前 | |
refactor: 组件间通信支持自定义AKSK双因子认证 支持开发者通过自定义配置 AKSK 密钥对，便于灵活接入不同的密钥管理与轮转策略。 Refs: issue #28 Signed-off-by: slichengsong <slicheng.song@huawei.com> | 5 个月前 | |
feat(iam_server): integrate Keycloak and Casdoor auth with quota polling - Add Keycloak and implement token exchange endpoint - Add keycloak_issuer_url flag and fix resource leaks - Extract role from both realm_access and resource_access - Use preferred_username as tenantId for per-user token isolation - Extract and return quota info from Keycloak token - Implement Keycloak consolidation and quota polling - Add missing KeycloakConfig fields - Address code review findings from Codex/Gemini - Add casdoor auth flow support - Fix Casdoor auth and permanent JWT expiry Signed-off-by: yuchaow <wangyuchao12@huawei.com> | 3 个月前 | |
chore: consolidate sandbox follow-up fixes Signed-off-by: mhsong2 <songminhui2@huawei.com> | 1 个月前 | |
chore: consolidate sandbox follow-up fixes Signed-off-by: mhsong2 <songminhui2@huawei.com> | 1 个月前 | |
feat(iam_server): integrate Keycloak and Casdoor auth with quota polling - Add Keycloak and implement token exchange endpoint - Add keycloak_issuer_url flag and fix resource leaks - Extract role from both realm_access and resource_access - Use preferred_username as tenantId for per-user token isolation - Extract and return quota info from Keycloak token - Implement Keycloak consolidation and quota polling - Add missing KeycloakConfig fields - Address code review findings from Codex/Gemini - Add casdoor auth flow support - Fix Casdoor auth and permanent JWT expiry Signed-off-by: yuchaow <wangyuchao12@huawei.com> | 3 个月前 | |
feat(iam_server): integrate Keycloak and Casdoor auth with quota polling - Add Keycloak and implement token exchange endpoint - Add keycloak_issuer_url flag and fix resource leaks - Extract role from both realm_access and resource_access - Use preferred_username as tenantId for per-user token isolation - Extract and return quota info from Keycloak token - Implement Keycloak consolidation and quota polling - Add missing KeycloakConfig fields - Address code review findings from Codex/Gemini - Add casdoor auth flow support - Fix Casdoor auth and permanent JWT expiry Signed-off-by: yuchaow <wangyuchao12@huawei.com> | 3 个月前 | |
feat(iam_server): integrate Keycloak and Casdoor auth with quota polling - Add Keycloak and implement token exchange endpoint - Add keycloak_issuer_url flag and fix resource leaks - Extract role from both realm_access and resource_access - Use preferred_username as tenantId for per-user token isolation - Extract and return quota info from Keycloak token - Implement Keycloak consolidation and quota polling - Add missing KeycloakConfig fields - Address code review findings from Codex/Gemini - Add casdoor auth flow support - Fix Casdoor auth and permanent JWT expiry Signed-off-by: yuchaow <wangyuchao12@huawei.com> | 3 个月前 | |
feat(iam_server): integrate Keycloak and Casdoor auth with quota polling - Add Keycloak and implement token exchange endpoint - Add keycloak_issuer_url flag and fix resource leaks - Extract role from both realm_access and resource_access - Use preferred_username as tenantId for per-user token isolation - Extract and return quota info from Keycloak token - Implement Keycloak consolidation and quota polling - Add missing KeycloakConfig fields - Address code review findings from Codex/Gemini - Add casdoor auth flow support - Fix Casdoor auth and permanent JWT expiry Signed-off-by: yuchaow <wangyuchao12@huawei.com> | 3 个月前 | |
chore: consolidate sandbox follow-up fixes Signed-off-by: mhsong2 <songminhui2@huawei.com> | 1 个月前 | |
chore: consolidate sandbox follow-up fixes Signed-off-by: mhsong2 <songminhui2@huawei.com> | 1 个月前 | |
fix(test): restore functionsystem test execution Recent litebus API changes, distro hardening defaults, and the test harness runtime environment had drifted apart enough that the repo-level test entrypoint either failed before execution, discovered zero cases, or hung in several InstanceCtrl paths. This change realigns build flags, runtime env wiring, and the affected tests so the requested repo workflow is trustworthy again. Constraint: User-required verification path is the real repo entrypoint bash run.sh test -j8 Constraint: Memory pressure requires keeping verification capped at -j8 instead of full parallelism Rejected: Switch test away from Debug | hides the real compiler/toolchain conflict instead of fixing it Rejected: Keep -fstack-check and force-disable clash protection | weakens the host toolchain hardening defaults Rejected: Only patch the hanging tests | leaves discovery, link, and remote-signal regressions unresolved Confidence: high Scope-risk: moderate Reversibility: clean Directive: If run.sh test regresses again, verify discovery counts and serial-suite handling before chasing individual test failures Tested: ./functionsystem/build/bin/functionsystem_unit_test --gtest_filter=InstanceCtrlTest.KillInstanceWithCreating; ./functionsystem/build/bin/functionsystem_unit_test --gtest_filter=InstanceCtrlTest.ForwardCustomSignalSuccess; ./functionsystem/build/bin/functionsystem_unit_test --gtest_filter=InstanceCtrlTest.*; bash run.sh test -j8 Not-tested: Full test run above -j8; non-Linux toolchains beyond the currently validated environment Signed-off-by: yuchaow <wangyuchao12@huawei.com> | 2 个月前 | |
fix(codecheck): reduce sandbox launcher lint findings Signed-off-by: mhsong2 <songminhui2@huawei.com> | 16 天前 | |
fix(iam): preserve role in forwarded token requests Extend the internal GetTokenRequest message with role and expiration fields so IAM slave instances can forward token creation requests without dropping request-scoped JWT metadata. This keeps multi-frontend deployments consistent with the direct leader path. Requests that land on a non-leader IAM actor now preserve X-Role and custom TTL when forwarded to the token manager leader. Signed-off-by: Tianyu Zhou <zhoutianyu1995@gmail.com> (cherry picked from commit f815b3b9eadd6ac0779a4684d2de6e36a4b73175) | 16 天前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 8 个月前 | ||
| 5 个月前 | ||
| 5 个月前 | ||
| 3 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 2 个月前 | ||
| 16 天前 | ||
| 16 天前 |