3 Commits

Author	SHA1	Message	Date
0x1d	31e8ca7ce9	fix(lint): use explicit safe type conversions for gosec ... Use separate variables with explicit else branches to make type conversions safe and satisfy gosec integer overflow checks.	2025-11-07 09:37:53 +01:00
0x1d	e673fcae6f	fix(lint): fix all linting errors ... - Check BindEnv return values in config.go - Add bounds checks for int->int32/uint32 conversions to prevent overflow - Remove unused test helper functions	2025-11-07 09:34:38 +01:00
0x1d	b1b895e818	feat(epic2): Implement core authentication and authorization services ... - Implement Audit Service (2.5) - gRPC server with Record and Query operations - Database persistence with audit schema - Service registry integration - Entry point: cmd/audit-service - Implement Identity Service (2.2) - User CRUD operations - Password hashing with argon2id - Email verification and password reset flows - Entry point: cmd/identity-service - Fix package naming conflicts in user_service.go - Implement Auth Service (2.1) - JWT token generation and validation - Login, RefreshToken, ValidateToken, Logout RPCs - Integration with Identity Service - Entry point: cmd/auth-service - Note: RefreshToken entity needs Ent generation - Implement Authz Service (2.3, 2.4) - Permission checking and authorization - User roles and permissions retrieval - RBAC-based authorization - Entry point: cmd/authz-service - Implement gRPC clients for all services - Auth, Identity, Authz, and Audit clients - Service discovery integration - Full gRPC communication - Add service configurations to config/default.yaml - Create SUMMARY.md with implementation details and testing instructions - Fix compilation errors in Identity Service (password package conflicts) - All services build successfully and tests pass	2025-11-06 20:07:20 +01:00