furumi-ng

7 Commits

Include renames

Author	SHA1	Message	Date
Boris Cherepanov	bafa3e0ec0	feat: update auth Publish Metadata Agent Image / build-and-push-image (push) Successful in 1m5s Details Publish Node Player Image / build-and-push-image (push) Failing after 17s Details Publish Web Player Image / build-and-push-image (push) Successful in 1m19s Details	2026-04-19 21:50:38 +03:00
UltradesuandClaude Opus 4.6	1ea5f66ea3	fix(node-player): add offline_access scope and server-side token refresh Publish Metadata Agent Image (dev) / build-and-push-image (push) Has been cancelled Details Publish Node Player Image (dev) / build-and-push-image (push) Successful in 36s Details Publish Web Player Image (dev) / build-and-push-image (push) Successful in 1m50s Details - Add offline_access to OIDC scope so Authentik issues a refresh token - /auth/token now checks if access token is expired and refreshes it server-side before returning to the client Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 16:01:16 +01:00
UltradesuandClaude Opus 4.6	b1f75b3ee2	fix(node-player): use Express 5 catch-all route syntax Publish Metadata Agent Image / build-and-push-image (push) Has been cancelled Details Publish Web Player Image / build-and-push-image (push) Has been cancelled Details Publish Node Player Image / build-and-push-image (push) Has been cancelled Details Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 15:20:02 +01:00
UltradesuandClaude Opus 4.6	f3392eff9f	fix(node-player): use expires_in instead of expires_at on AccessToken type Publish Web Player Image / build-and-push-image (push) Waiting to run Details Publish Metadata Agent Image / build-and-push-image (push) Successful in 4m18s Details Publish Node Player Image / build-and-push-image (push) Successful in 1m20s Details Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 15:01:30 +01:00
UltradesuandClaude Opus 4.6	e99cacae8b	feat(auth): replace cookie/api-key auth with JWT Bearer tokens, separate UI from API Publish Metadata Agent Image / build-and-push-image (push) Successful in 6m3s Details Publish Node Player Image / build-and-push-image (push) Failing after 58s Details Publish Web Player Image / build-and-push-image (push) Has been cancelled Details - Add JWT Bearer token validation to Rust API via OIDC provider JWKS with automatic key rotation and 1-hour cache - Remove x-api-key auth support and built-in web UI from furumi-web-player, leaving it as a pure API server - Add /auth/token endpoint to Node player server to expose OIDC access tokens to the frontend - Move Node player auth endpoints from /api/* to /auth/* to avoid path conflicts with Rust API - Add static file serving to Node Express server for production single-container deployment - Fix SameSite=Strict cookie issue breaking OIDC redirect flow (use Lax) - Add Dockerfile.node-player with multi-stage Node.js build - Add CI workflows for node-player Docker image (dev + release) - Optimize Rust Dockerfiles with dependency caching layer - Update docker-compose with OIDC env vars and OLLAMA_MODEL support - Cherry-pick agent LLM client fixes from DEV branch Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 14:51:52 +01:00
Boris Cherepanov	4f239c2546	feat: added disable auth mode Publish Metadata Agent Image / build-and-push-image (push) Successful in 1m6s Details Publish Web Player Image / build-and-push-image (push) Successful in 1m14s Details Publish Server Image / build-and-push-image (push) Successful in 2m9s Details	2026-03-19 15:47:21 +03:00
Boris Cherepanov	cfcf6e4029	feat: added express + vite app + oidc Publish Metadata Agent Image / build-and-push-image (push) Successful in 3m28s Details Publish Web Player Image / build-and-push-image (push) Successful in 1m9s Details Publish Server Image / build-and-push-image (push) Successful in 2m16s Details	2026-03-19 15:06:32 +03:00