Repository navigation

feat(auth): group claims, public and validate-only clients for app.yaml - #138

Merged

Alexanderamiri merged 10 commits into

mainfrom

feat/app-auth-features

Oct 23, 2026

Merged

feat(auth): group claims, public and validate-only clients for app.yaml#138
Alexanderamiri merged 10 commits into
mainfrom
feat/app-auth-features

Commits on Oct 23, 2026
- fix(iam): per-team ECS execution roles and lock teams out of shared SGs
  
  Alexanderamiri
  and
  claude
  committed
  757af91
- fix(ci): identify callers of ci-broker and apply-gate by GitHub OIDC
  
  Alexanderamiri
  and
  claude
  committed
  8452701
- fix(ci): create team CI roles only for registry teams
  
  Alexanderamiri
  and
  claude
  committed
  c9f16de
- revert: keep syncing team roles from GitHub org teams in this PR
  
  Alexanderamiri
  and
  claude
  committed
  1fbc270
- docs: restore CLAUDE.md notes for this PR's changes
  
  Alexanderamiri
  and
  claude
  committed
  7c0cc78
- feat(auth): put registry groups into tokens and enforce app groups
  
  Alexanderamiri
  and
  claude
  committed
  4114251
- feat(app-yaml): public and validate-only auth clients, env aliases
  
  Alexanderamiri
  and
  claude
  committed
  067db3d
- fix(auth): prune stale group memberships and fail closed on allowed groups
  
  Alexanderamiri
  and
  claude
  committed
  25aed70
- Merge remote-tracking branch 'origin/main' into feat/app-auth-features
  Alexanderamiri
  committed
  ee8747d
- Merge remote-tracking branch 'origin/main' into feat/app-auth-features
  Alexanderamiri
  committed
  94a4879