chore: track all project map and index files
Add generated .pi-map.md and .pi-map.index.md files across the repository so the project navigation maps are shared and versioned. These artifacts are maintained by project_map_init/patch/validate and must be kept in sync with source edits. Note: .cache/ remains ignored (added in previous commit).
This commit is contained in:
@@ -0,0 +1,25 @@
|
||||
# openspec/changes/archive/2026-05-17-auth-oauth (index)
|
||||
dir: openspec/changes/archive/2026-05-17-auth-oauth
|
||||
|
||||
## role
|
||||
Archive of a 2026-05-17 design proposal for implementing OAuth2/OIDC authentication with Authentik integration in a backend API.
|
||||
## parent
|
||||
index: openspec/changes/archive/.pi-map.index.md
|
||||
map: openspec/changes/archive/.pi-map.md
|
||||
## children
|
||||
- openspec/changes/archive/2026-05-17-auth-oauth/specs
|
||||
index: openspec/changes/archive/2026-05-17-auth-oauth/specs/.pi-map.index.md
|
||||
map: openspec/changes/archive/2026-05-17-auth-oauth/specs/.pi-map.md
|
||||
## files
|
||||
- .openspec.yaml
|
||||
- README.md
|
||||
- design.md
|
||||
- proposal.md
|
||||
- tasks.md
|
||||
## links
|
||||
index: openspec/changes/archive/2026-05-17-auth-oauth/.pi-map.index.md
|
||||
map: openspec/changes/archive/2026-05-17-auth-oauth/.pi-map.md
|
||||
## workflows
|
||||
-
|
||||
## dirty
|
||||
-
|
||||
@@ -0,0 +1,23 @@
|
||||
# openspec/changes/archive/2026-05-17-auth-oauth
|
||||
dir: openspec/changes/archive/2026-05-17-auth-oauth
|
||||
|
||||
index: openspec/changes/archive/2026-05-17-auth-oauth/.pi-map.index.md
|
||||
|
||||
## role
|
||||
Archive of a 2026-05-17 design proposal for implementing OAuth2/OIDC authentication with Authentik integration in a backend API.
|
||||
## files
|
||||
- .openspec.yaml | Defines an OpenAPI specification file metadata with schema type and creation date
|
||||
- README.md | Documents a project that implements OAuth2/OIDC authentication using Authentik with internal JWTs and database-backed refresh tokens | dep: Authentik, OAuth2, OIDC, JWT
|
||||
- design.md | Design document specifying an OAuth2/OIDC authentication system using Authentik with internal JWT access tokens, DB-backed opaque refresh tokens, and environment-aware cookie policies. | dep: Authentik, Python async SQLAlchemy, Alembic, JWT library, JWKS client, cookie handling library
|
||||
- proposal.md | Proposes a technical implementation plan for adding production-ready OAuth2/OIDC authentication with Authentik integration, JWT session management, and secure token lifecycle handling to a backend API project. | dep: Authentik, OAuth2/OIDC, JWKS, JWT, database, apps/api/src, config, models, auth services, API routes
|
||||
- tasks.md | Task tracking document for implementing OIDC/JWT authentication system with refresh tokens in a backend application. | dep: SQLAlchemy, Alembic, Authentik OIDC, pytest, ruff, mypy, asyncpg, PostgreSQL
|
||||
## arch
|
||||
Specification-driven design documentation using OpenAPI metadata, with phased implementation planning (proposal → design → tasks → README) for a hybrid token architecture (JWT access tokens + opaque DB-backed refresh tokens) with environment-aware security policies.
|
||||
## tags
|
||||
oidc, authentik, oauth2, jwt, authentication, tokens, refresh, design
|
||||
## symbols
|
||||
-
|
||||
## workflows
|
||||
-
|
||||
## dirty
|
||||
-
|
||||
@@ -0,0 +1,20 @@
|
||||
# openspec/changes/archive/2026-05-17-auth-oauth/specs (index)
|
||||
dir: openspec/changes/archive/2026-05-17-auth-oauth/specs
|
||||
|
||||
## role
|
||||
Contains archived OpenAPI specification files for an OAuth authentication feature change from May 17, 2026, serving as versioned documentation snapshots in the API specification change tracking system.
|
||||
## parent
|
||||
index: openspec/changes/archive/2026-05-17-auth-oauth/.pi-map.index.md
|
||||
map: openspec/changes/archive/2026-05-17-auth-oauth/.pi-map.md
|
||||
## children
|
||||
- openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth
|
||||
index: openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth/.pi-map.index.md
|
||||
map: openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth/.pi-map.md
|
||||
## files
|
||||
## links
|
||||
index: openspec/changes/archive/2026-05-17-auth-oauth/specs/.pi-map.index.md
|
||||
map: openspec/changes/archive/2026-05-17-auth-oauth/specs/.pi-map.md
|
||||
## workflows
|
||||
-
|
||||
## dirty
|
||||
-
|
||||
@@ -0,0 +1,18 @@
|
||||
# openspec/changes/archive/2026-05-17-auth-oauth/specs
|
||||
dir: openspec/changes/archive/2026-05-17-auth-oauth/specs
|
||||
|
||||
index: openspec/changes/archive/2026-05-17-auth-oauth/specs/.pi-map.index.md
|
||||
|
||||
## role
|
||||
Contains archived OpenAPI specification files for an OAuth authentication feature change from May 17, 2026, serving as versioned documentation snapshots in the API specification change tracking system.
|
||||
## files
|
||||
## arch
|
||||
Flat directory structure with dated, feature-named archival folders using a timestamped naming convention (YYYY-MM-DD-{feature}) to preserve immutable specification versions for historical reference and auditability.
|
||||
## tags
|
||||
-
|
||||
## symbols
|
||||
-
|
||||
## workflows
|
||||
-
|
||||
## dirty
|
||||
-
|
||||
@@ -0,0 +1,19 @@
|
||||
# openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth (index)
|
||||
dir: openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth
|
||||
|
||||
## role
|
||||
Defines authentication and authorization requirements for OAuth2/OIDC integration with Authentik identity provider.
|
||||
## parent
|
||||
index: openspec/changes/archive/2026-05-17-auth-oauth/specs/.pi-map.index.md
|
||||
map: openspec/changes/archive/2026-05-17-auth-oauth/specs/.pi-map.md
|
||||
## children
|
||||
-
|
||||
## files
|
||||
- spec.md
|
||||
## links
|
||||
index: openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth/.pi-map.index.md
|
||||
map: openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth/.pi-map.md
|
||||
## workflows
|
||||
-
|
||||
## dirty
|
||||
-
|
||||
@@ -0,0 +1,19 @@
|
||||
# openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth
|
||||
dir: openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth
|
||||
|
||||
index: openspec/changes/archive/2026-05-17-auth-oauth/specs/auth-oauth/.pi-map.index.md
|
||||
|
||||
## role
|
||||
Defines authentication and authorization requirements for OAuth2/OIDC integration with Authentik identity provider.
|
||||
## files
|
||||
- spec.md | Specifies OAuth2/OIDC authentication, session security, token refresh, and logout requirements for a web application using Authentik as the identity provider. | dep: Authentik, JWKS, OAuth2, OIDC, HTTP cookies, database
|
||||
## arch
|
||||
Specification-driven architecture using Markdown-based requirements documentation for security and session management patterns.
|
||||
## tags
|
||||
oauth2, oidc, authentik, spec, specifies, authentication, session, security
|
||||
## symbols
|
||||
-
|
||||
## workflows
|
||||
-
|
||||
## dirty
|
||||
-
|
||||
Reference in New Issue
Block a user