9572045787
chore(auth): MxGateway unify dev LDAP base DN to dc=zb,dc=local (Task 1.6)
Joseph Doherty
2026-06-02 06:44:38 -04:00
7e1af37eb1
feat(auth): MxGateway dashboard adopt ZbClaimTypes + ZbCookieDefaults, keep cookie name (Task 1.5)
Joseph Doherty
2026-06-02 06:10:48 -04:00
05009d7370
feat(auth): cut MxGateway API keys over to ZB.MOM.WW.Auth.ApiKeys 0.1.2; keep constraint enforcement+gRPC+CLI on top (Task 1.3)
Joseph Doherty
2026-06-02 02:08:38 -04:00
c3b466e13d
feat(auth): cut MxGateway dashboard LDAP over to ZB.MOM.WW.Auth.Ldap; roles via IGroupRoleMapper (Task 1.2/1.4)
Joseph Doherty
2026-06-02 00:51:10 -04:00
a912bffad5
build: reference ZB.MOM.WW.Health from the Gitea feed
Joseph Doherty
2026-06-01 13:29:39 -04:00
e13152f340
test: remove redundant HostBuildingCollection workaround (shared lib no longer installs a global frozen logger)
feat/adopt-zb-telemetry-serilog
Joseph Doherty
2026-06-01 08:47:21 -04:00
deba5ed115
refactor(logging): correlation scope + redaction on shared ILogRedactor seam
Joseph Doherty
2026-06-01 08:06:28 -04:00
4bf71a0b2c
refactor(logging): adopt ZB.MOM.WW.Telemetry.Serilog bootstrap
Joseph Doherty
2026-06-01 08:03:49 -04:00
9bdb899774
fix(clients): inline Go gosec directive and strip IPv6 brackets in Python authority split
feat/tls-cert-autogen
Joseph Doherty
2026-06-01 07:57:22 -04:00
e5c704de69
feat(gateway): add machine FQDN to self-signed cert SANs
Joseph Doherty
2026-06-01 07:52:48 -04:00
4e520f9c0c
fix(gateway): delete temp cert file on persist failure
Joseph Doherty
2026-06-01 07:45:15 -04:00
2eb81379e4
docs: TLS auto-cert and lenient client trust
Joseph Doherty
2026-06-01 07:43:13 -04:00
ddd5721082
fix(gateway): harden self-signed cert persistence and config validation
Joseph Doherty
2026-06-01 07:37:27 -04:00
3775f6bf3b
feat(gateway): supply generated cert as Kestrel HTTPS default
Joseph Doherty
2026-06-01 07:30:26 -04:00
cdfad420bb
fix(client-rust): apply TLS guard to GalaxyClient and add CLI strict flag
Joseph Doherty
2026-06-01 07:28:16 -04:00
330e665f6b
fix(gateway): correct ECDSA key usage and dispose CertificateRequest
Joseph Doherty
2026-06-01 07:27:15 -04:00
5e01ad9c22
fix(client-dotnet): apply lenient TLS to GalaxyRepositoryClient and enforce hostname on CA-pin
Joseph Doherty
2026-06-01 07:24:07 -04:00
77a9108673
feat(gateway): persist/reuse self-signed cert with hardened permissions
Joseph Doherty
2026-06-01 07:23:33 -04:00
192607ab8c
fix(gateway): detect Certificate:Thumbprint and cover more KestrelTlsInspector cases
Joseph Doherty
2026-06-01 07:22:24 -04:00
ba82afe669
fix(client-java): keep Temurin 21 toolchain, auto-provision instead of bumping to 26
Joseph Doherty
2026-06-01 07:20:04 -04:00
fe7d1ce1ec
feat(gateway): validate MxGateway:Tls options
Joseph Doherty
2026-06-01 07:19:22 -04:00
b8a6695612
feat(gateway): generate self-signed ECDSA cert with SANs
Joseph Doherty
2026-06-01 07:18:39 -04:00
6f9188bc8d
test(client-python): update TLS default-channel test for TOFU behavior
Joseph Doherty
2026-06-01 07:17:36 -04:00
a276f46f81
feat(client-java): accept gateway cert by default over TLS
Joseph Doherty
2026-06-01 07:13:45 -04:00
572b268d81
feat(client-rust): accept gateway cert by default over TLS (or documented pin-only fallback)
Joseph Doherty
2026-06-01 07:11:09 -04:00
4c093a64fa
feat(client-python): accept gateway cert by default via TOFU pre-fetch
Joseph Doherty
2026-06-01 07:10:55 -04:00
f47bbaea95
feat(client-dotnet): accept gateway cert by default over TLS
Joseph Doherty
2026-06-01 07:08:55 -04:00
c463b49f46
feat(client-go): accept gateway cert by default over TLS
Joseph Doherty
2026-06-01 07:08:47 -04:00