Commit Graph

647 Commits

Author SHA1 Message Date
simonredfern
3450df5d01 OAuth2 step 2 ok 2025-12-01 11:28:40 +01:00
simonredfern
dc69f9664d OAuth2 login first step works 2025-12-01 11:07:05 +01:00
simonredfern
d14fb57005 OAuth1 to OAuth2 2025-11-30 10:11:51 +01:00
simonredfern
a86f1455bb Add implementation status tracking document
- Track progress across all 6 phases
- Document completed work (Phases 1-2: 100%)
- List remaining tasks
- Provide testing checklist
- Include quick reference commands
- Timeline and achievement tracking

Current Status: 60% complete
- Backend core implementation: Complete
- Ready for testing with OBP-OIDC server
2025-11-29 19:56:19 +01:00
simonredfern
b2df3a9791 Phase 2: Integrate OAuth2 into application
Application Integration:
- Update server/app.ts to initialize OAuth2Service on startup
  * Conditional initialization based on VITE_USE_OAUTH2 flag
  * OIDC discovery document fetching
  * Comprehensive error handling and logging
  * Graceful fallback if OIDC provider unavailable

UserController Updates:
- Support dual authentication (OAuth 1.0a and OAuth2)
- OAuth2 user session detection and retrieval
- Automatic token refresh when access token expires
- Unified user data format for both auth methods
- Enhanced logout to clear both OAuth 1.0a and OAuth2 sessions
- Comprehensive logging for debugging

Features:
- Seamless switching between auth methods via feature flag
- Backward compatibility maintained
- Automatic token refresh before expiry
- Session cleanup on logout
- Error handling with fallback to empty response

Next phase: Update frontend components for OAuth2 login flow
2025-11-29 19:54:58 +01:00
simonredfern
86295f827a Phase 1: Implement OAuth2/OIDC core infrastructure
Backend Implementation:
- Add arctic and jsonwebtoken dependencies
- Create PKCEUtils for OAuth2 PKCE flow (RFC 7636)
- Create OAuth2Service for OIDC provider integration
  * OIDC discovery (.well-known/openid-configuration)
  * Authorization URL generation with PKCE
  * Token exchange (code for access/refresh/ID tokens)
  * Token refresh flow
  * UserInfo endpoint integration
- Create OAuth2AuthorizationMiddleware (initiate auth flow)
- Create OAuth2CallbackMiddleware (handle provider callback)
- Create OAuth2ConnectController (/oauth2/connect endpoint)
- Create OAuth2CallbackController (/oauth2/callback endpoint)

Configuration:
- Add OAuth2 environment variables to env_ai
- Feature flag VITE_USE_OAUTH2 for gradual migration
- Support for OBP-OIDC provider

Features:
- PKCE (Proof Key for Code Exchange) support
- State parameter for CSRF protection
- Session-based token storage
- Comprehensive error handling
- Security best practices (token expiration, flow timeout)

Note: Backend infrastructure complete. Next phase: integrate with app.ts
and update UserController for dual auth support.
2025-11-29 19:53:41 +01:00
simonredfern
ba783c0f22 Add OAuth2/OIDC integration preparation documentation
- Add OAUTH2-README.md: Overview and navigation guide
- Add OAUTH2-QUICK-START.md: 15-minute setup guide with code examples
- Add OAUTH2-OIDC-INTEGRATION-PREP.md: Complete 60-page implementation guide

Documentation covers:
- 6-phase implementation plan (6 weeks)
- Integration with OBP-OIDC provider
- Reference implementation from OBP-Portal
- Complete code examples for all components
- Testing strategy and deployment guide
- Backward compatibility with OAuth 1.0a
2025-11-29 19:48:30 +01:00
Simon Redfern
7d31179300
Merge pull request #134 from hongwei1/develop
refactor/Enhance code styling in main.css and improve type safety in HeaderNav.vue. Added color for code blocks and updated type annotations for query selectors.
2025-11-25 15:59:55 +01:00
Hongwei
094a20471c refactor/Enhance code styling in main.css and improve type safety in HeaderNav.vue. Added color for code blocks and updated type annotations for query selectors. 2025-11-25 10:41:44 +01:00
simonredfern
2cbc48135f Feature: Adding Help page (gets data from glossary Item) 2025-11-10 18:41:36 +01:00
simonredfern
7905adb252 Making sure important env variables are not null. 2025-11-07 07:15:10 +01:00
simonredfern
eae18ad106 Adding a shared constant for the default API Version which is used if
the env variable is not present.
2025-11-07 07:07:17 +01:00
Simon Redfern
b5db95e9e3
Merge pull request #131 from constantine2nd/develop
API Explorer II - make v6.0.0 the default version
2025-11-06 12:43:02 +01:00
Simon Redfern
2d8ee2b9eb
Merge pull request #130 from nemozak1/develop
fix glossary, 'more' button and message docs
2025-11-06 12:42:48 +01:00
Marko Milić
24107ee884 feature/API Explorer II - make v6.0.0 the default version 2025-11-06 11:29:34 +01:00
Nemo Godebski-Pedersen
bc11cdd719 Merge commit '407ee85785e44429bb284286c1be1a27e799ba47' into develop 2025-11-06 15:32:57 +07:00
Nemo Godebski-Pedersen
3a7f127b67 fix message docs and glossary search nav 2025-11-06 15:30:02 +07:00
Nemo Godebski-Pedersen
031379374c fix header-nav-more dropdown 2025-11-06 14:36:26 +07:00
Nemo Godebski-Pedersen
0cbc387bb4 fix glossary word wrapping 2025-11-06 14:23:30 +07:00
Simon Redfern
407ee85785
Merge pull request #129 from nemozak1/develop
fix glossary scrollbars
2025-11-05 16:33:48 +01:00
Nemo Godebski-Pedersen
58dfa6b172 fixed horizontal scrolling issue 2025-11-05 17:54:45 +07:00
Nemo Godebski-Pedersen
46aeccfc35 fix glossary scrollbars 2025-11-05 16:45:37 +07:00
Simon Redfern
3c60c0587c
Merge pull request #127 from constantine2nd/develop
Glossary does not seem to scroll properly on API Explorer II
2025-10-21 10:35:22 +02:00
Marko Milić
b1c4b8966a bugfix/Glossary does not seem to scroll properly on API Explorer II 2025-10-21 09:49:01 +02:00
simonredfern
7f234a779d bugfix: Fixing issue if bank_id is set to "" or the whole body is set to
""
2025-10-06 19:07:53 +02:00
Simon Redfern
6b617f7111
Merge pull request #122 from hongwei1/develop
bugfix/Refactor API request handling in Preview component and obp mod…
2025-10-06 16:08:36 +02:00
Hongwei
2ae8f18462 bugfix/Refactor API request handling in Preview component and obp module to ensure safe body parsing and conditional sending. Updated create and update functions to handle optional body parameters and prevent errors from empty or invalid JSON inputs. 2025-10-06 15:39:51 +02:00
Simon Redfern
de1feb9fa2
Merge pull request #121 from nemozak1/develop
Message Docs Improvement
2025-10-02 12:41:04 +02:00
Nemo Godebski-Pedersen
6549c3b3d6 merge chat.ts 2025-10-02 17:19:15 +07:00
Nemo Godebski-Pedersen
611bee3633 WIP message docs improvement 2025-10-02 17:15:21 +07:00
Nemo Godebski-Pedersen
7487c89d6e fix message docs WIP 2025-09-30 19:56:00 +07:00
Marko Milić
cd1d5c8ec3 bugfix/MAke Opey widget recevite responses at GUI 2025-09-17 12:42:45 +07:00
Hongwei
e9c6de1105 Enhance chat store to support new API message types and improve legacy handling. Added support for assistant token streaming, tool lifecycle events, and approval requests. 2025-09-17 12:42:07 +07:00
Hongwei
d3f51a9716 Remove 'kafka_vSept2018' connector from StatusController and message-docs 2025-09-17 12:42:07 +07:00
Simon Redfern
810510d7f7
Merge pull request #115 from hongwei1/develop
Enhance chat store to support new API message
2025-08-11 17:27:23 +02:00
Hongwei
11d0067dc2 Merge remote-tracking branch 'origin/develop' into develop
# Conflicts:
#	src/stores/chat.ts
2025-08-11 17:26:34 +02:00
Hongwei
7b1200563d Enhance chat store to support new API message types and improve legacy handling. Added support for assistant token streaming, tool lifecycle events, and approval requests. 2025-08-11 17:23:50 +02:00
Simon Redfern
131b73432b
Merge pull request #114 from constantine2nd/develop
Make Opey widget recevite responses at GUI
2025-08-11 16:23:29 +02:00
Marko Milić
4f5a7ddaaa bugfix/MAke Opey widget recevite responses at GUI 2025-08-11 15:36:23 +02:00
Hongwei
826adcb8e0 Remove 'kafka_vSept2018' connector from StatusController and message-docs 2025-08-07 12:58:53 +02:00
Nemo Godebski-Pedersen
f198428eb4 simplify json editor 2025-05-23 11:46:41 +07:00
Simon Redfern
04ed8ea0d0
Merge pull request #106 from nemozak1/develop
Fix enter to submit, and dynamic entities not loading
2025-05-22 13:23:53 +02:00
Nemo Godebski-Pedersen
5f71949127 remove redundant js script 2025-05-21 19:34:25 +07:00
Nemo Godebski-Pedersen
e3fe428136 get suggested timeout from OBP 2025-05-21 19:28:18 +07:00
Nemo Godebski-Pedersen
7c24d821a5 inactivity timeout refactor for Vue 2025-05-21 19:21:02 +07:00
Nemo Godebski-Pedersen
fea483833c Merge remote-tracking branch 'origin' into develop 2025-05-20 18:13:37 +07:00
Nemo Godebski-Pedersen
f4fa0e4ce9 fix page redirect when logout 2025-05-20 18:12:52 +07:00
Nemo Godebski-Pedersen
267cffba3b fix redirecting after log on 2025-05-20 18:12:52 +07:00
Nemo Godebski-Pedersen
39ab9373f0 add error screen to opey chat widget 2025-05-20 18:12:52 +07:00
Nemo Godebski-Pedersen
05a5fe24a0 add dynamic entities to API Explorer II 2025-05-20 18:12:52 +07:00