Commit Graph

3 Commits

Author SHA1 Message Date
d4c734737b feat: role-based access via Zitadel project roles
Replace the ALLOWED_USER_IDS sub-allowlist with a Zitadel project role
check: tokens must carry the role from REQUIRED_ROLE (default "user")
in the urn:zitadel:iam:org:project[:id]:roles claim. Roles are granted
per account in Zitadel (project ClaudeDo), where access is now managed.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-10 11:25:34 +00:00
56186a1fea feat: zitadel provisioning script + project-audience scope 2026-06-10 08:07:20 +00:00
935ff5b757 feat: scaffold nuxt app 2026-06-10 07:49:40 +00:00