fix: disable native touch panning on mobile terminal and archive specs

- Change mobile terminal CSS to use touch-action: none and
  overscroll-behavior: none so the custom touch handler owns swipes
- Archive completed/partial OpenSpec specs to
  openspec/changes/archive/2026-06-14-completed-specs-archive/
- Regenerate project maps

Quality gates: npm run typecheck, npm run lint (apps/web)
This commit is contained in:
Developer
2026-06-14 18:07:01 +00:00
parent 896674195c
commit c8db6ce933
580 changed files with 4678 additions and 4333 deletions
@@ -1,10 +1,10 @@
# archive/2026-05-17-auth-oauth
dir: archive/2026-05-17-auth-oauth
# 2026-05-17-auth-oauth
dir: 2026-05-17-auth-oauth
index: archive/2026-05-17-auth-oauth/.pi-map.index.md
index: 2026-05-17-auth-oauth/.pi-map.index.md
## role
Archive directory containing design documents and proposals for an OAuth2/OIDC authentication system with Authentik integration and JWT token management.
Authentication and authorization package implementing OAuth2/OIDC integration with Authentik for secure user session management.
## files
- .openspec.yaml | Defines an OpenAPI specification file metadata with schema type and creation date
- README.md | Documents a project that implements OAuth2/OIDC authentication using Authentik with internal JWTs and database-backed refresh tokens | dep: Authentik, OAuth2, OIDC, JWT
@@ -12,7 +12,7 @@ Archive directory containing design documents and proposals for an OAuth2/OIDC a
- proposal.md | Proposes a technical implementation plan for adding production-ready OAuth2/OIDC authentication with Authentik integration, JWT session management, and secure token lifecycle handling to a backend API project. | dep: Authentik, OAuth2/OIDC, JWKS, JWT, database, apps/api/src, config, models, auth services, API routes
- tasks.md | Task tracking document for implementing OIDC/JWT authentication system with refresh tokens in a backend application. | dep: SQLAlchemy, Alembic, Authentik OIDC, pytest, ruff, mypy, asyncpg, PostgreSQL
## arch
Document-driven design specification using markdown-based RFCs, with OpenAPI metadata, separating concerns into design rationale (design.md), implementation planning (proposal.md), task tracking (tasks.md), and project documentation (README.md).
Layered security architecture with external IdP delegation (Authentik OIDC), internal JWT stateless access tokens, database-backed opaque refresh tokens, and environment-aware cookie security policies.
## tags
oidc, authentik, oauth2, jwt, authentication, tokens, refresh, design
## symbols