kitos d81fc04b8f feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0 ...

- ApiKey model (SHA-256 hash, prefix, scopes, expiry) + Alembic migration (b040ent)
- SsoConfig model for SAML 2.0 IdP settings (attribute mapping, auto-provision)
- API key auth integrated into get_current_user (aegis_ prefix detection)
- Routers: /api/v1/api-keys (full CRUD + revoke) and /api/v1/sso (metadata, login, callback, config)
- python3-saml added to requirements; Dockerfile adds libxmlsec1-dev for SAML XML signing
- QA script: 52 assertions covering key lifecycle, API key auth, SSO config

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-20 16:43:57 +02:00

..

7cec59461d53_add_evidences_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

14c6f07b47cb_add_tests_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

4671fccfa705_add_users_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

476930a8d86e_add_techniques_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

a1412d1ef337_add_audit_logs_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

b001_add_new_test_states.py

feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)

2026-02-09 09:58:54 +01:00

b002_add_evidence_team_notes.py

feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)

2026-02-09 09:58:54 +01:00

b003_add_dual_validation_fields.py

feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)

2026-02-09 09:58:54 +01:00

b004_add_test_templates_table.py

feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)

2026-02-09 09:58:54 +01:00

b005_add_v2_indexes.py

feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)

2026-02-09 09:58:54 +01:00

b006_add_notifications_table.py

feat(phase-18): add in-app notification system (T-128, T-129)

2026-02-09 13:52:04 +01:00

b007_add_remediation_fields.py

feat(phase-19): add remediation fields and reports system (T-130, T-131)

2026-02-09 13:58:35 +01:00

b008_add_data_sources_table.py

feat(phase-21): add V3 demo seed, DataSource and DetectionRule models (T-200, T-201, T-202)

2026-02-09 16:06:44 +01:00

b009_add_detection_rules_table.py

feat(phase-21): add V3 demo seed, DataSource and DetectionRule models (T-200, T-201, T-202)

2026-02-09 16:06:44 +01:00

b010_add_threat_actors_tables.py

feat(phase-23): add Threat Actor profiles with MITRE CTI import, API, heatmap and gap analysis (T-208 to T-212)

2026-02-09 16:27:38 +01:00

b011_add_defensive_techniques_tables.py

feat(phase-24): integrate MITRE D3FEND defensive techniques with ATT&CK mapping (T-213, T-214)

2026-02-09 16:38:59 +01:00

b012_add_detection_rule_associations.py

feat(phase-25): add detection rule associations, checklist UI and evaluation workflow (T-215, T-216)

2026-02-09 16:44:35 +01:00

b013_add_campaigns_tables.py

feat(phase-26): add Campaign models, endpoints, service with kill chain timeline UI (T-217 to T-220)

2026-02-09 16:52:52 +01:00

b014_add_compliance_tables.py

feat(phase-29): add compliance framework mapping, reports and UI (T-227 to T-229)

2026-02-09 18:41:24 +01:00

b015_add_coverage_snapshots.py

feat(phase-30): add coverage snapshots, temporal comparison and auto re-testing (T-230 to T-232)

2026-02-10 08:34:29 +01:00

b016_add_retest_fields.py

feat(phase-30): add coverage snapshots, temporal comparison and auto re-testing (T-230 to T-232)

2026-02-10 08:34:29 +01:00

b017_add_campaign_scheduling.py

feat(phase-31): add campaign scheduling and recurring automation (T-233 to T-234)

2026-02-10 08:38:00 +01:00

b018_add_performance_indexes.py

feat(phase-33): final polish V3 - navigation, performance, and documentation (T-238 to T-240)

2026-02-10 09:21:35 +01:00

b019_add_composite_indexes.py

feat(phase-34): resolve blocking tech debt — Redis, domain exceptions, indexes, CI

2026-02-17 15:43:05 +01:00

b020_add_jira_links_and_worklogs.py

fix(phase-35): use pure SQL for jira_links migration

2026-02-17 16:33:42 +01:00

b021_add_phase_timing_fields.py

feat(phase-37): timer pause/resume + professional reporting engine

2026-02-17 17:20:45 +01:00

b022_add_osint_items.py

feat(phase-38): automatic intelligence — OSINT enrichment + stale coverage detection

2026-02-17 17:47:47 +01:00

b023_add_must_change_password.py

feat(phase-39): role-based access control overhaul + forced password change

2026-02-18 10:37:02 +01:00

b024_add_critical_test_audit_indexes.py

perf(indexes): add critical indexes for Test and AuditLog models (P0)

2026-02-18 12:12:54 +01:00

b025_add_unique_test_detection_result.py

db: enforce unique constraint on test_detection_results

2026-02-18 13:20:28 +01:00

b026_add_technique_query_indexes.py

feat(infra): add repository implementations, mappers, FastAPI wiring, and technique indexes

2026-02-18 19:10:50 +01:00

b027_add_scoring_config.py

refactor(scoring): persist weights in DB table, replace mutable Settings with scoring_config_service

2026-02-19 17:46:02 +01:00

b028_phase0_campaign_tests_composite_index.py

feat(db): add Phase 0 composite indexes migration [FASE-0.3]

2026-05-18 13:19:20 +02:00

b029_phase3_audit_and_classification.py

feat(compliance): data classification fields and retention policies job [FASE-3.5]

2026-05-18 14:17:29 +02:00

b030_phase5_scoring_and_snapshots.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

b031_phase6_webhooks.py

feat(phases): implement webhooks (6.1), email (7.1), user preferences (7.2)

2026-05-19 13:40:45 +02:00

b032_phase7_user_prefs.py

feat(phases): implement webhooks (6.1), email (7.1), user preferences (7.2)

2026-05-19 13:40:45 +02:00

b033_system_configs.py

feat(settings): Settings page with email, webhooks, notifications, profile [FASE-8]

2026-05-19 15:10:31 +02:00

b034_detection_lifecycle.py

feat(dlm): Phase 8 — Detection Lifecycle Management [FASE-8]

2026-05-19 15:45:16 +02:00

b035_ownership_queue.py

fix(migration): rewrite b035 with raw SQL to avoid SQLAlchemy DDL hook

2026-05-19 16:54:32 +02:00

b036_attack_paths.py

feat(attack-paths): Phase 10 — Attack Paths & Advanced Purple Team [FASE-10]

2026-05-20 13:11:01 +02:00

b037_knowledge.py

feat(knowledge): Phase 11 — Knowledge Management (Playbooks + Lessons Learned) [FASE-11]

2026-05-20 13:39:05 +02:00

b038_risk_intelligence.py

feat(risk): Phase 12 — Risk Intelligence [FASE-12]

2026-05-20 15:31:38 +02:00

b039_executive_dashboard.py

feat(dashboard): Phase 13 — Executive Dashboard

2026-05-20 16:20:21 +02:00

b040_enterprise_readiness.py

feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0

2026-05-20 16:43:57 +02:00

ef21f4a670ed_add_intel_items_table.py

feat: Phase 1 - Data models and migrations (T-004 to T-009)

2026-02-06 12:26:26 +01:00

f03e5712c21c_init.py

feat: Phase 0 - Infrastructure and scaffolding (T-001 to T-003)

2026-02-06 11:28:30 +01:00