feat: add Keycloak authentication for dashboard and API endpoints #2

Merged
sharang merged 2 commits from feature/keycloak-auth into main 2026-03-07 23:50:57 +00:00

2 Commits

Author SHA1 Message Date
Sharang Parnerkar
f52f9fd65f Run cargo fmt across all crates
All checks were successful
CI / Clippy (push) Successful in 2m55s
CI / Security Audit (push) Has been skipped
CI / Tests (push) Has been skipped
CI / Format (pull_request) Successful in 2s
CI / Format (push) Successful in 2s
CI / Clippy (pull_request) Successful in 2m54s
CI / Security Audit (pull_request) Has been skipped
CI / Tests (pull_request) Has been skipped
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-08 00:35:48 +01:00
Sharang Parnerkar
daaa588fc3 Add Keycloak authentication for dashboard and API endpoints
Some checks failed
CI / Clippy (push) Successful in 3m17s
CI / Security Audit (push) Has been skipped
CI / Tests (push) Has been skipped
CI / Format (push) Failing after 37s
CI / Format (pull_request) Failing after 3s
CI / Security Audit (pull_request) Has been cancelled
CI / Tests (pull_request) Has been cancelled
CI / Clippy (pull_request) Has been cancelled
Dashboard: OAuth2/OIDC login flow with PKCE, session-based auth middleware
protecting all server function endpoints, check-auth server function for
frontend auth state, login page gate in AppShell, user info in sidebar.

Agent API: JWT validation middleware using Keycloak JWKS endpoint,
conditionally enabled when KEYCLOAK_URL and KEYCLOAK_REALM are set.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 23:59:52 +01:00