 rock
|
ff3e48504c
|
docs: API.md + RBAC.md with Authentik integration
Documentation:
- docs/API.md: Complete API reference with examples
- All endpoints with curl examples
- Python SDK example
- Error responses and rate limits
- docs/RBAC.md: RBAC system documentation
- Two-level access control explained
- Built-in roles (admin, portfolio-agent, authenticated-user)
- Authentik configuration guide
- Scope mapping examples for roles/permissions
- Troubleshooting guide
JWT Integration:
- Add 'roles' field to JwtClaims struct
- Wire roles from Authentik JWT to RBAC Claims
- API key users get 'admin' role by default
Tests:
- Add test_to_rbac_claims_with_roles
- Verify roles extraction from JWT
- 670 tests passing
|
2026-09-01 09:44:52 -07:00 |
|