Logto integration Phases 0-2: setup + JWT foundation + additive schema - #4

Open

itkujo wants to merge 95 commits into

mainfrom

feature/logto-integration

Commits on Apr 29, 2026

docs(logto): operator setup guide + LOGTO_* env var contract
Daniel Velez
committed

Commits on Apr 30, 2026

fix(logto-docs): Management API resource is https://default.logto.app/api
Daniel Velez
committed
feat(auth): JWT validator + Logto claims extraction
Daniel Velez
committed
refactor(auth): apply Phase 1 review fixes
Daniel Velez
committed
docs: codify database ownership zones + migration rules
Daniel Velez
committed
feat(logto): Management API client with cached M2M token
Daniel Velez
committed
style(auth): drop 'auth:' error prefix to match codebase convention
Daniel Velez
committed
test(logto): live smoke test against real Logto deployment
Daniel Velez
committed
feat(middleware): RequireJWT validates Logto-issued JWTs on every request
Daniel Velez
committed
test(middleware): apply Phase 1.4 review fixes
Daniel Velez
committed
feat(middleware): RequireSportMatchesJWT cross-checks X-Sport vs JWT org_id
Daniel Velez
committed
fix(auth,middleware): apply Phase 1 final review findings
Daniel Velez
committed
feat(health): expose build commit + timestamp via /api/v1/health
Daniel Velez
committed

Commits on May 1, 2026

fix(deploy): rely on Coolify SOURCE_COMMIT for build-info, drop git COPY
Daniel Velez
committed
docs(health): document Coolify SOURCE_COMMIT flow into build-info
Daniel Velez
committed
fix(deploy): expand build context to repo root for commit-SHA injection
Daniel Velez
committed
docs(health): clarify how Dockerfile resolves the build commit
Daniel Velez
committed
revert(deploy): drop repo-root build context, accept commit='unknown'
Daniel Velez
committed
docs(health): align comment with revert in 970324e
Daniel Velez
committed
plan(logto-phase-2): expand Phase 2 outline to additive-only design
Daniel Velez
committed
feat(db): Phase 2 additive schema migration + sqlc bindings
Daniel Velez
committed
docs(health): note Phase 2 migration deploy verification approach
Daniel Velez
committed
fix(migration-00041): remove PLPGSQL DO block goose can't parse
Daniel Velez
committed
fix(db): apply Phase 2 final review findings (I-1, I-2, I-3)
Daniel Velez
committed
feat(dev): docker-compose.dev.yml + Logto seed script for local dev
Daniel Velez
committed
fix(dev): logto runtime config (entrypoint seed, timeout, healthcheck)
Daniel Velez
committed
fix(logto): cap page_size at 100 + quote .env value with space
Daniel Velez
committed

Commits on May 2, 2026

feat(auth): scaffold Logto SDK config and AuthProvider
Daniel Velez
committed
plan(logto): Phase 3 frontend implementation plan + amendments
Daniel Velez
committed
feat(auth): replace cookie-based useAuth with Logto-backed hook
Daniel Velez
committed
feat(auth): apiFetch attaches Bearer + X-Sport, requests org-scoped token
Daniel Velez
committed
chore(web): document VITE_LOGTO_* in web/.env.example
Daniel Velez
committed
feat(sport): GET /api/v1/sports + SportContext provider
Daniel Velez
committed
feat(routing): move sport-scoped routes under /$sport segment
Daniel Velez
committed
feat(picker): sport picker landing replaces /login + /register
Daniel Velez
committed
feat(auth): OIDC callback route at /auth/callback
Daniel Velez
committed
feat(profile): GET/PATCH /api/v1/me/profile + form route
Daniel Velez
committed
fix(routing): replace stale /login navigations with signIn() calls
Daniel Velez
committed
feat(auth): Logto webhook handler + on-demand user mirror
Daniel Velez
committed

Commits on May 3, 2026

test(e2e): Playwright auth-flow smoke + fixes uncovered during it
Daniel Velez
committed
docs(logto): document Phase 3 local DB patches needing seeder fixes
Daniel Velez
committed
feat(auth): JWT-session bridge middleware + migrate 19 route groups (Phase 3.5 C1+C6)
Daniel Velez
committed
feat(seeder): apply 3 Phase 3.5 patches automatically (C2)
Daniel Velez
committed
test(e2e): assert dashboard renders with content (Phase 3.5 C1 verify)
Daniel Velez
committed
fix(auth): address Phase 3 review C3+C4+I1
Daniel Velez
committed
fix(auth): Phase 3.6 review fixes (mixed-auth + role + production guards)
Daniel Velez
committed
fix(auth): apply Phase 3.6 review I-1 + I-2
Daniel Velez
committed
feat(landing): public landing + Logto-aware seed + single-sport mode
Daniel Velez
committed

Commits on May 4, 2026

fix(routing): lift SportProvider to global, derive slug from URL
Daniel Velez
committed
docs: comprehensive feature inventory at docs/FEATURES.md
Daniel Velez
committed
docs(features): correct impersonation restoration path (Logto-native)
Daniel Velez
committed
fix(routing): /overlay nav uses trailing slash + SportGuard skips reserved roots
Daniel Velez
committed
fix(overlay): normalize null arrays from backend; settings page no longer crashes on idle courts
Daniel Velez
committed
fix(overlay): normalize missing element config keys; settings page no longer late-crashes
Daniel Velez
committed
docs: add SMOKE_TEST.md with 18-section local smoke checklist
Daniel Velez
committed
fix(search): mount SearchModal inside RouterProvider + sport-scope links
Daniel Velez
committed
fix(profile): keep ProfileEdit mounted across Logto SDK isLoading flips
Daniel Velez
committed
feat(ux): public surface for signed-in users + Google Places on profile
Daniel Velez
committed

Commits on May 5, 2026

feat(ux): smoke-test fixes from sections 7-18
Daniel Velez
committed
docs(features): record smoke 7-18 known issues + deferred work
Daniel Velez
committed
infra(prod): wire Logto env vars + Dockerfile ENV promotion + prod-bootstrap
Daniel Velez
committed

Commits on May 6, 2026

infra(prod): wire Resend SMTP + add docker-compose.bootstrap.yaml
Daniel Velez
committed
feat(ghost): SMTP via Resend + 'make ghost-theme' packager
Daniel Velez
committed
infra(prod): add Logto service to unified compose stack
Daniel Velez
committed
infra(prod): split Postgres into separate db (app) + db_logto services
Daniel Velez
committed
feat(backup): include db_logto in 'make backup-full'
Daniel Velez
committed
fix(prod): drop nested COMMIT default that broke Coolify parser
Daniel Velez
committed
fix(coolify): add SERVICE_FQDN_<NAME>_<PORT> for proxy routing
Daniel Velez
committed

Commits on May 7, 2026

fix(coolify): SERVICE_FQDN_*_<PORT> looks up correct env key
Daniel Velez
committed

Commits on May 8, 2026

feat(deploy): one-shot 'seed' service that runs logto-seed on every deploy
Daniel Velez
committed
fix(deploy): gate seed service behind 'seed' compose profile
Daniel Velez
committed
fix(auth): apply Logto org-role elevation in /api/v1/auth/me too
Daniel Velez
committed
fix(auth): verify sports.logto_org_id at boot to prevent silent token downgrade
Daniel Velez
committed
feat(auth): auto-bootstrap Logto on every api boot
Daniel Velez
committed
fix(auth): gate /me on sport context to ensure org-scoped token
Daniel Velez
committed
fix(auth): request UserScope.OrganizationRoles so platform_admin appears in token
Daniel Velez
committed
TEMP: bypass platform_admin check at all three gates while debugging Logto roles
Daniel Velez
committed

Commits on May 11, 2026

feat(admin): visible bypass banner + Logto operational runbook
Daniel Velez
committed
fix(auth): elevate platform_admin via Logto Mgmt API since JWT lacks the claim
Daniel Velez
committed

Commits on Jun 14, 2026

Commits on Jun 15, 2026

docs: current status + handoff (resume on another machine) (#20)

itkujo
and
claude
authored