zeekay 2957c9e773 refactor: org-based RBAC, drop isAdmin/roles claims ...

Org IS the role:
- built-in org = full admin access to all compliance modules
- Any other org = self-service only (sessions, applications, kyc)

Removed: RequirePermission, HasRole, X-User-Roles, X-User-IsAdmin
Added: requireOrgAccess (checks X-Org-Id against adminOrg)
Added: localnet environment config

2026-04-03 14:57:22 -07:00

..

auth_test.go

refactor: org-based RBAC, drop isAdmin/roles claims

2026-04-03 14:57:22 -07:00

auth.go

refactor: org-based RBAC, drop isAdmin/roles claims

2026-04-03 14:57:22 -07:00