feat(auth): mPass SSO via oauth2-proxy ForwardAuth with cookie-handoff - #1

Merged

jawad-khan merged 13 commits into

foss-mainfrom

feat/mpass-proxy-auth

Apr 15, 2026

Commits on Apr 15, 2026

feat(auth): mPass SSO via oauth2-proxy ForwardAuth with cookie-handoff

awais786
authored and
jawad-khan
committed
c37cd5f
refactor(auth): SSO defaults + delegate user provisioning to middleware

awais786
authored and
jawad-khan
committed
9ddc5ae
fix(sso): redirect logout to platform landing page instead of app origin

awais786
authored and
jawad-khan
committed
f66f9e3
fix(auth): re-fetch proxy_user in fresh session to prevent detached-instance crash

awais786
authored and
jawad-khan
committed
113dbd0
fix(sso): prevent logout redirect race + fix double-encoded Cognito URL

awais786
authored and
jawad-khan
committed
2c70f72
fix(auth): handle detached proxy_user at point-of-use instead of refetch helper

awais786
authored and
jawad-khan
committed
cef4259
ci: gate tests on PRs targeting foss-main

awais786
authored and
jawad-khan
committed
6a66d6e
test(auth): align unit + integration tests with SSO-only auth

awais786
authored and
jawad-khan
committed
1695b8c
test(stripe): restore TEST_EMAIL import and pin STRIPE_PAGE_BUYING_ENABLED

awais786
authored and
jawad-khan
committed
d15cb6c
chore(lint): silence ruff C408 on cookie_opts dict literal

awais786
authored and
jawad-khan
committed
85a0fd2
style(web): biome format — fix indent + quote style

awais786
authored and
jawad-khan
committed
95e2c6a
style: apply ruff + biome format drift

awais786
authored and
jawad-khan
committed
559848f
feat(auth): synthesize email and set display_name from SSO header

awais786
authored and
jawad-khan
committed
8eb58df

Navigation Menu

Uh oh!

feat(auth): mPass SSO via oauth2-proxy ForwardAuth with cookie-handoff - #1

feat(auth): mPass SSO via oauth2-proxy ForwardAuth with cookie-handoff#1
jawad-khan merged 13 commits into
foss-mainfrom
feat/mpass-proxy-auth

Commits on Apr 15, 2026

feat(auth): mPass SSO via oauth2-proxy ForwardAuth with cookie-handoff

refactor(auth): SSO defaults + delegate user provisioning to middleware

fix(sso): redirect logout to platform landing page instead of app origin

fix(auth): re-fetch proxy_user in fresh session to prevent detached-instance crash

fix(sso): prevent logout redirect race + fix double-encoded Cognito URL

fix(auth): handle detached proxy_user at point-of-use instead of refetch helper

ci: gate tests on PRs targeting foss-main

test(auth): align unit + integration tests with SSO-only auth

test(stripe): restore TEST_EMAIL import and pin STRIPE_PAGE_BUYING_ENABLED

chore(lint): silence ruff C408 on cookie_opts dict literal

style(web): biome format — fix indent + quote style

style: apply ruff + biome format drift

feat(auth): synthesize email and set display_name from SSO header