 zeekay
|
4e37e1e8cc
|
auth: unify identity headers, add preferred_username JWT fallback
- resolveIAMToken: fallback sub → preferred_username → name (Casdoor compat)
- extractOrgID: X-Org-Id (was X-IAM-Org-Id)
- platformIdentityHeaders: remove X-Hanzo-* legacy headers
- Only X-User-Id, X-Org-Id, X-User-Email — no vendor prefix
|
2026-03-02 16:45:30 -07:00 |
|
|
zeekay
|
00609ecedb
|
feat(platform): multi-org service with KMS creds, customer identity, and API routes
- OrgService: per-org config cache, KMS credential resolution with env fallback,
customer identity provisioning with sequential IDs
- org_configs + org_customers system collections auto-created on boot
- REST routes under /api/platform/org with IAM-based access control
- Remove tenant-authorization header forwarding (unused)
- Simplify auth proxy to forward only Authorization header
|
2026-03-02 00:37:26 -07:00 |
|