feat: SSO/OIDC en el gateway (Okta · Azure AD · Auth0) — epic S-2#20

Merged

dherrero merged 14 commits into

mainfrom

feat/sso-oidc-gateway

Jun 11, 2026

Commits on Jun 10, 2026

feat(db): federated_identity table + nullable user password (T-23)

dherrero
and
claude
committed
feat(dto): shared SSO contracts + FEDERATED_IDENTITY internal scope (T-24)

dherrero
and
claude
committed
feat(api): federated resolve/provision endpoint + NULL-password guard (T-25)

dherrero
and
claude
committed
feat(gateway): multi-provider OIDC registry + discovery (T-26)

dherrero
and
claude
committed
feat(gateway): OIDC auth-code+PKCE handshake + local session emission (T-27, T-28)

dherrero
and
claude
committed
feat(gateway): RP-initiated federated logout (T-29)

dherrero
and
claude
committed
feat(front): SSO login buttons + callback landing (T-30)

dherrero
and
claude
committed
docs: SSO/OIDC — SECURITY.md, .env.example, gateway AGENTS.md, roadmap (T-31)

dherrero
and
claude
committed
fix(gateway): drop removed keyGeneratorIpFallback rate-limit validation

dherrero
and
claude
committed
docs: prefer package.json scripts over external commands (AGENTS.md)

dherrero
and
claude
committed
test(gateway): e2e SSO flow against a real mock OIDC provider (T-32)

dherrero
and
claude
committed
fix: regenerate package-lock with npm 10 to match CI (node 22.12.0)

dherrero
and
claude
committed
fix: regenerate package-lock under linux node 22.12.0 to fix CI npm ci

dherrero
and
claude
committed

Commits on Jun 11, 2026

chore(ci): align CI/release Node to 24.14.1 (matches .nvmrc + engines)

dherrero
and
claude
committed