feat(authentik): application access and synchronization RC checkpoint #59

Merged

james.maes merged 1 commits from james.maes/authentik-rc-checkpoint-20261105 AGit into develop 2026-11-05 11:40:21 +00:00

Conversation 0 Commits 1 Files Changed 105

+15531 -92

james.maes commented 2026-11-05 11:30:20 +00:00

Owner

Copy link

Copy source

Checkpoint the user-approved QBit RC: user/group/QQQ application-role permissions, bounded access catalogs, SQL directory mirrors, durable webhook inbox, refreshed session permissions, native invitation enrollment assignments, and isolated local review with browser acceptance scripts. Fix the token-widget SQL column mapping. Companion UI: QRun-IO/qqq-frontend-next#205. Validation: 463 unit tests and JaCoCo passed with verify -DskipITs; browser access/membership/inheritance/approval/invitation/token acceptance passed; staged secret scan passed. Known RC limitations: latest full run had 3 errors among 108 integration tests (SchemaDriftIT placeholder regex, mirror PostgreSQL closed connection, inbox PostgreSQL I/O); bootstrap deadlock recovered on retry. Full 1.0 acceptance remains open in docs/RELEASE-1.0.md. User authorized commit, push and merge as an RC candidate. Request normal merge and the existing release:rc workflow after required forge checks; do not bypass protections.

Checkpoint the user-approved QBit RC: user/group/QQQ application-role permissions, bounded access catalogs, SQL directory mirrors, durable webhook inbox, refreshed session permissions, native invitation enrollment assignments, and isolated local review with browser acceptance scripts. Fix the token-widget SQL column mapping. Companion UI: https://git.kof22.com/QRun-IO/qqq-frontend-next/pulls/205. Validation: 463 unit tests and JaCoCo passed with verify -DskipITs; browser access/membership/inheritance/approval/invitation/token acceptance passed; staged secret scan passed. Known RC limitations: latest full run had 3 errors among 108 integration tests (SchemaDriftIT placeholder regex, mirror PostgreSQL closed connection, inbox PostgreSQL I/O); bootstrap deadlock recovered on retry. Full 1.0 acceptance remains open in docs/RELEASE-1.0.md. User authorized commit, push and merge as an RC candidate. Request normal merge and the existing release:rc workflow after required forge checks; do not bypass protections.

james.maes added 1 commit 2026-11-05 11:30:20 +00:00

feat(authentik): checkpoint application access and identity synchronization RC ... 2e356b8117

Add user and group QQQ application-role access editing, bounded catalogs,
webhook inbox and SQL mirrors, refreshed session permissions, and deferred
invitation assignments. Include the isolated local review host, browser
acceptance scripts, documentation and the token-widget column mapping fix.

User approved this RC checkpoint. Full 1.0 gates remain documented, including
the schema-drift matcher and PostgreSQL integration errors from the full gate.
Companion UI: QRun-IO/qqq-frontend-next#205.

Co-Authored-By: GPT-6 <noreply@openai.com>

james.maes added the release:rc label 2026-11-05 11:40:16 +00:00

james.maes merged commit 98275d42ea into develop 2026-11-05 11:40:21 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

architecture

Architecture review: coupling, cohesion, UI API

bug

Something isn't working

dependencies

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

github_actions

Pull requests that update GitHub Actions code

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

java

Pull requests that update java code

question

Further information is requested

release:rc

Merging this develop PR cuts the next release candidate

secuurity

wontfix

This will not be worked on

No labels release:rc

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qbit-authentik#59