feat(accounts): central RBAC enforces by default, refusals are counted, sign-out reaches the provider, the audit log archives daily by antoinetoussaint-byte · Pull Request #1298 · codefly-dev/module-saas-starter

fix(accounts): central RBAC admission enforces unless an operator opts out, and refusals are counted

antoinetoussaint-byte

and

claude

committed

5167732

feat(accounts): signing out reaches the identity provider, both ways

antoinetoussaint-byte

and

claude

committed

b6a50b0

chore(frontend): saas-sdk 0.3.43 for the Logout response contract

antoinetoussaint-byte

and

claude

committed

4b7063b

feat(accounts): a scheduled, leased, idempotent daily audit archive with a receipt

antoinetoussaint-byte

and

claude

committed

fa212b7

fix(accounts): a day's archive window stops one instant before the next midnight

antoinetoussaint-byte

and

claude

committed

3345d36

docs(configurations): the audit-archive group, in the group reference

antoinetoussaint-byte

and

claude

committed

fb4cb53

test(accounts): record the archive's and the back-channel's control-plane crossings

antoinetoussaint-byte

and

claude

committed

6bcc4e0

test(accounts): the business suite's logout case reads the new response

antoinetoussaint-byte

and

claude

committed

7a44c98

test(gateway): route the back-channel logout receiver, and derive the extension count

antoinetoussaint-byte

and

claude

committed

34452bb

chore(frontend): the workspace lock carries saas-sdk 0.3.43

antoinetoussaint-byte

and

claude

committed

9ac18dc

fix(accounts): the sign-out URL is an additive RPC, not a changed Logout response

antoinetoussaint-byte

and

claude

committed

ad421cb

fix(accounts): regenerate the event catalog, move the pinned catalog counts, name the exemption's guards

antoinetoussaint-byte

and

claude

committed

41bd5dc

Navigation Menu

Repository navigation

feat(accounts): central RBAC enforces by default, refusals are counted, sign-out reaches the provider, the audit log archives daily - #1298

feat(accounts): central RBAC enforces by default, refusals are counted, sign-out reaches the provider, the audit log archives daily#1298
antoinetoussaint-byte merged 12 commits into
mainfrom
issue-1296-accounts-nyl-requirements-central-rbac-enforces-by-default

Commits on Nov 3, 2026

fix(accounts): central RBAC admission enforces unless an operator opts out, and refusals are counted

feat(accounts): signing out reaches the identity provider, both ways

chore(frontend): saas-sdk 0.3.43 for the Logout response contract

feat(accounts): a scheduled, leased, idempotent daily audit archive with a receipt

fix(accounts): a day's archive window stops one instant before the next midnight

docs(configurations): the audit-archive group, in the group reference

test(accounts): record the archive's and the back-channel's control-plane crossings

test(accounts): the business suite's logout case reads the new response

test(gateway): route the back-channel logout receiver, and derive the extension count

chore(frontend): the workspace lock carries saas-sdk 0.3.43

fix(accounts): the sign-out URL is an additive RPC, not a changed Logout response

fix(accounts): regenerate the event catalog, move the pinned catalog counts, name the exemption's guards