Files
RafaelandWOZCODE e06e7498db feat(auth): per-service authz branch on /auth/module-identity
When the ingress annotation carries permission (+project_uuid), authorize
against the tenant's orchest-api /api/authz/check (host derived from the JWT,
allowlist-guarded); relay allow/deny, fail-closed 502. All-or-nothing on
incomplete params; param-less requests stay identity-only (webserver case).

Co-Authored-By: WOZCODE <contact@withwoz.com>
2026-08-20 10:12:45 -03:00
..
2022-10-25 16:21:58 -03:00
2026-03-10 15:19:18 -03:00