3 Commits

Include renames

Author	SHA1	Message	Date
admin	495050752a	feat(api): real Zitadel token introspection (fail-closed) + expected-audience enforcement ... - preHandler: Bearer tokens are introspected against Zitadel (RFC 7662) - any introspection failure (unreachable, non-200, bad JSON, inactive) = 401 - asserted aud must include ZITADEL_EXPECTED_AUDIENCE (project id); absent aud accepted per RFC 7662 - config: ZITADEL_INTROSPECTION_CLIENT_ID/SECRET + ZITADEL_EXPECTED_AUDIENCE (optional; Bearer-presence fallback logs warn in prod) - 13 new tests (introspection fail-closed matrix + preHandler flow)	2026-09-16 22:06:46 +02:00
admin	e04cf8fbd3	c0py: initial scaffolding for website registry tool ... Repo: sax3l/c0py (created on Gitea, code pushed) Initial scaffolding includes: - apps/api: Fastify API server (typecheck, build, test pass) - apps/web: Next.js UI (build passes) - packages/c0py-core: Crawler, registry assembler, analyzer (6 tests pass) - packages/config: Zod-validated env loader - packages/types: Shared TypeScript types CI/CD: .gitea/workflows/ci.yml + deploy.yml Dockerfile for Coolify deployment mise.toml (toolchain contract) lefthook.yml, renovate.json docs/architecture/OVERVIEW.md, docs/PLATFORM.md Platform setup required (see docs/PLATFORM.md): 1. Coolify app provision (c0py on server5/6) 2. Postgres database (dedicated, not shared) 3. Infisical secrets (DATABASE_URL, CL0UD, ZITADEL, AUD0, ST0RE, INF0, N0D) 4. DNS c0py.siax.io A-record 5. Zitadel OIDC project (Simon-decision) Status: dev (repo live, code pushable, platform infra pending)	2026-09-16 13:33:45 +02:00
admin	e6cc719f37	c0py: initial scaffolding for website registry tool	2026-09-16 13:15:21 +02:00