kitos d81fc04b8f feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0 ...

- ApiKey model (SHA-256 hash, prefix, scopes, expiry) + Alembic migration (b040ent)
- SsoConfig model for SAML 2.0 IdP settings (attribute mapping, auto-provision)
- API key auth integrated into get_current_user (aegis_ prefix detection)
- Routers: /api/v1/api-keys (full CRUD + revoke) and /api/v1/sso (metadata, login, callback, config)
- python3-saml added to requirements; Dockerfile adds libxmlsec1-dev for SAML XML signing
- QA script: 52 assertions covering key lifecycle, API key auth, SSO config

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-20 16:43:57 +02:00

..

dependencies

feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0

2026-05-20 16:43:57 +02:00

domain

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

infrastructure

feat(infra): add Redis service and client for Phase 0 [FASE-0.1]

2026-05-18 13:18:45 +02:00

jobs

feat(ownership): Phase 9 — Ownership & Daily Operations [FASE-9]

2026-05-19 16:48:47 +02:00

middleware

feat(audit): enhanced audit trail with IP, user-agent and integrity hash [FASE-3.1]

2026-05-18 14:16:18 +02:00

models

feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0

2026-05-20 16:43:57 +02:00

routers

feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0

2026-05-20 16:43:57 +02:00

schemas

feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0

2026-05-20 16:43:57 +02:00

services

feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0

2026-05-20 16:43:57 +02:00

templates/reports

feat(reports): add quarterly and technique HTML templates [FASE-2.2]

2026-05-18 14:00:40 +02:00

__init__.py

feat: Phase 0 - Infrastructure and scaffolding (T-001 to T-003)

2026-02-06 11:28:30 +01:00

auth.py

feat(auth): move JWT blacklist to Redis with TTL [FASE-0.2]

2026-05-18 13:19:15 +02:00

config.py

feat(phases): implement webhooks (6.1), email (7.1), user preferences (7.2)

2026-05-19 13:40:45 +02:00

database.py

test: add TestEntity tests and fix test infrastructure (222 green)

2026-02-18 15:29:24 +01:00

limiter.py

feat(security): extend rate limits on sync, tests, evidence and reports [FASE-3.4]

2026-05-18 14:16:53 +02:00

logging_config.py

feat(logging): add structured JSON logging for production, human-readable text for development

2026-02-19 19:07:08 +01:00

main.py

feat(enterprise): Phase 14 — API Key Management + SSO/SAML 2.0

2026-05-20 16:43:57 +02:00

seed_data_sources.py

fix: D3FEND expandable cards, System page cleanup, and multi-source improvements

2026-02-10 13:22:23 +01:00

seed_decay_policies.py

feat(dlm): Phase 8 — Detection Lifecycle Management [FASE-8]

2026-05-19 15:45:16 +02:00

seed_demo.py

feat(phase-21): add V3 demo seed, DataSource and DetectionRule models (T-200, T-201, T-202)

2026-02-09 16:06:44 +01:00

seed.py

fix: resolve 20 security vulnerabilities from comprehensive audit

2026-02-11 08:56:26 +01:00

storage.py

fix: resolve 20 security vulnerabilities from comprehensive audit

2026-02-11 08:56:26 +01:00

utils.py

fix: resolve 20 security vulnerabilities from comprehensive audit

2026-02-11 08:56:26 +01:00