2 commits

Author	SHA1	Message	Date
Corentin JOGUET	571f5c3426	feat(auth): Bloc 4 — middleware OIDC-ready avec dual mode service-token + Authentik JWT ... - Support JWT OIDC Authentik via jose + JWKS (cache 10min) - Lookup Personne via PersonneRepo.findByEmail + cache Redis 60s - Mapping groups Authentik + roles formation-hub vers scopes - Mode OIDC active uniquement si AUTHENTIK_ISSUER + JWKS_URI + AUDIENCE set - Service tokens brg_* inchanges, restent voie principale en local	2026-05-07 21:17:56 +02:00
Corentin JOGUET	5b2abbc23c	feat(bridge/adapters): bloc 1 propre — BaserowClient + DocmostClient + RedisCache ... - BaserowClient : CRUD rows, listRows pagination/filter/search, resolveTableIds, healthCheck - DocmostClient : auth session cookie auto-relogin, spaces/pages/shares CRUD, healthCheck - RedisCache : cache-aside, invalidation pattern SCAN, idempotence webhooks, rate limit sliding window - errors.ts : BridgeError typee + 11 ErrorCode (AUTH/RG_VIOLATION/BASEROW_UNAVAILABLE...) - bumps mineurs deps (hono, ofetch, ioredis, zod, pino) + ajout pino-pretty dev tsc strict mode clean, biome ci clean. Tests unit a venir (Bloc 6 via bridge-tester). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-07 19:39:58 +02:00