Implement Phase 1 & 2: Gmail OAuth Authentication foundation and core security (RS256 with JWKS)#200

Open

Copilot wants to merge 16 commits intomainfrom

copilot/implement-phase-1-gmail-oauth

Commits on Dec 6, 2025

Initial plan
Copilot
committed
Phase 1: Add Spring Security OAuth2 dependencies and create auth module structure

Copilot
and
jwijgerd
committed
Add comprehensive README for auth module documenting Phase 1 completion

Copilot
and
jwijgerd
committed
Fix test failures by adding SecurityConfig to permit all requests in commands and queries modules

Copilot
and
jwijgerd
committed
Add comprehensive security documentation and warnings to SecurityConfig classes

Copilot
and
jwijgerd
committed
Implement Phase 2: Core security components with JWT token provider and OAuth2 handlers

Copilot
and
jwijgerd
committed
Potential fix for code scanning alert no. 7: Disabled Spring CSRF protection

jwijgerd
and
github-advanced-security[bot]
authored
fix CodeQL security alerts
jwijgerd
committed
Revert "fix CodeQL security alerts"
jwijgerd
committed
Use JwtAuthenticationToken instead of UsernamePasswordAuthenticationToken for JWT authentication

Copilot
and
jwijgerd
committed
Fix Phase 2: Use RS256 with Nimbus JWT and JWKS instead of HS256 shared secret

GitHub Actions
and
jwijgerd
committed

Commits on Jan 2, 2026

Merge branch 'main' into copilot/implement-phase-1-gmail-oauth
jwijgerd
authored

Commits on Jan 9, 2026

Merge branch 'main' into copilot/implement-phase-1-gmail-oauth
jwijgerd
authored

Commits on Jan 10, 2026

Commits on Feb 7, 2026

fix: update OAuth2 redirect URI and adjust endpoint paths in SecurityConfig
jwijgerd
committed