pediatric-ai-scribe-v3/src
Daniel f748e02063
Some checks failed
Forgejo Docker Build / Root app tests (push) Successful in 49s
Forgejo Docker Build / Build Docker image (push) Successful in 8s
Forgejo Docker Build / End-to-end (browser) (push) Failing after 8s
feat: roles follow the SSO's groups, on every sign-in
Both PedsHub apps now take admin and moderator from the same two Authentik
groups. oidc.admin_groups and oidc.moderator_groups name them; unset means
local roles stand. Applied at every sign-in so removal at the SSO demotes
here, and never applied to the last admin — a group edit must not be able
to lock everyone out of the panel.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Dv6sqaY6Vq3ChZHMem3cnU
2026-09-13 13:54:12 +02:00
..
db feat: connect Nextcloud by signing in to Nextcloud 2026-09-12 20:55:00 +02:00
middleware fix: enforce sessions, escape quiz metadata and isolate ED drafts 2026-09-06 07:44:08 +02:00
routes feat: roles follow the SSO's groups, on every sign-in 2026-09-13 13:54:12 +02:00
utils fix: a deck reply that closed a slide early is repaired, and a modification keeps the theme 2026-09-13 13:43:21 +02:00