feat: SSO/OIDC en el gateway (Okta · Azure AD · Auth0) — epic S-2 - #20

Merged

dherrero merged 14 commits into

mainfrom

feat/sso-oidc-gateway

Jun 11, 2026

Commits on Jun 10, 2026

feat(db): federated_identity table + nullable user password (T-23)

dherrero
and
claude
committed
547ce36
feat(dto): shared SSO contracts + FEDERATED_IDENTITY internal scope (T-24)

dherrero
and
claude
committed
491bcac
feat(api): federated resolve/provision endpoint + NULL-password guard (T-25)

dherrero
and
claude
committed
9e6a431
feat(gateway): multi-provider OIDC registry + discovery (T-26)

dherrero
and
claude
committed
cfd4cd5
feat(gateway): OIDC auth-code+PKCE handshake + local session emission (T-27, T-28)

dherrero
and
claude
committed
849f565
feat(gateway): RP-initiated federated logout (T-29)

dherrero
and
claude
committed
977e0e2
feat(front): SSO login buttons + callback landing (T-30)

dherrero
and
claude
committed
9c59fd6
docs: SSO/OIDC — SECURITY.md, .env.example, gateway AGENTS.md, roadmap (T-31)

dherrero
and
claude
committed
d1e5bfc
fix(gateway): drop removed keyGeneratorIpFallback rate-limit validation

dherrero
and
claude
committed
e7c97db
docs: prefer package.json scripts over external commands (AGENTS.md)

dherrero
and
claude
committed
744622d
test(gateway): e2e SSO flow against a real mock OIDC provider (T-32)

dherrero
and
claude
committed
e5ad707
fix: regenerate package-lock with npm 10 to match CI (node 22.12.0)

dherrero
and
claude
committed
efddc12
fix: regenerate package-lock under linux node 22.12.0 to fix CI npm ci

dherrero
and
claude
committed
63d91e9

Commits on Jun 11, 2026

chore(ci): align CI/release Node to 24.14.1 (matches .nvmrc + engines)

dherrero
and
claude
committed
c4bfe34