Lucas Berger 9b569efeab feat(19-03): wire /callback link branch, OIDC-guard skip, de-Authelia comments ...

- /callback: reads signed state, extracts linkUserId, calls linkOidcToUser after OIDC session set; OidcLinkConflictError redirects to /?error=oidc-link-conflict
- OIDC guard: oidcAuthMiddleware() factory called once at construction, handler invoked per-request inside skip-when-user-set wrapper (D-03)
- middleware.ts: de-Authelia-ize comments — generic OIDC identity provider language (D-06, AUTH-LOCAL-18)
- localAuthMiddleware.ts: cast to typeof DEV_USER for ContextVariableMap type compatibility
- All 446 tests pass; typecheck clean

2026-06-17 16:59:06 -04:00

..

auth

feat(19-03): wire /callback link branch, OIDC-guard skip, de-Authelia comments

2026-06-17 16:59:06 -04:00

broker

refactor(18): IN-03 memoize household timezone per outbox drain cycle

2026-06-15 07:43:01 -04:00

db

feat(19-01): add local_credentials schema, 0003 migration, generate-secrets LOCAL_SESSION_SECRET, .dockerignore D-15

2026-06-17 16:17:04 -04:00

lib

feat(19-01): implement localSession JWT cookie helpers and assertLocalSessionSecretSet boot guard

2026-06-17 16:14:48 -04:00

routes

feat(19-03): implement POST /api/auth/local/login (rate-limit + lockout) + logout

2026-06-17 16:49:59 -04:00

index.ts

feat(19-03): wire /callback link branch, OIDC-guard skip, de-Authelia comments

2026-06-17 16:59:06 -04:00