3 Commits

Author	SHA1	Message	Date
Christophe Vila	48c17bf8ba	auth: add RequireSession chi-compatible middleware ... Implements HTTP middleware that enforces session authentication by validating session cookies and making claims available via ClaimsFromContext. Rejects requests without valid session cookies with 401 Unauthorized. Tested via four test cases: - Missing session cookie rejection - Valid cookie acceptance with claims extraction - Expired cookie rejection - Tampered cookie rejection Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>	2026-07-24 21:30:39 +02:00
Christophe Vila	59df391291	auth: add Keycloak OIDC verifier, role check, and test mock	2026-07-24 21:26:15 +02:00
Christophe Vila	bf41a34f59	auth: add signed session/transaction cookie mint and parse ... Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-24 21:20:04 +02:00