SnapOtter 54132d1833 feat(enterprise): add SAML 2.0 SSO with SP-initiated login ...

Implements SAML SSO using @node-saml/node-saml, gated behind
SAML_ENABLED env var and the saml_sso enterprise license feature.

- SAML env vars (entity ID, callback URL, IdP SSO URL, IdP cert,
  auto-create/auto-link users, default role, provider name,
  username/email attribute mapping) with validation in superRefine
- SAML plugin with three routes: metadata (GET), login (GET),
  and ACS callback (POST with form-urlencoded content type parser)
- Callback uses the shared external-auth resolver for user
  resolution (same pattern as OIDC: match/link/create/deny)
- Auth config endpoint exposes samlEnabled and samlProviderName
- Session loginMethod detection updated for SAML auth provider
- Frontend login page shows SAML SSO button when enabled
- i18n strings for SAML error messages across all 21 locales

2026-06-13 22:27:56 +08:00

..

drizzle

feat(db): add identity columns (lastActivity, toolPermissions, TOTP)

2026-06-13 22:04:14 +08:00

drizzle-sqlite-legacy

feat(tools): 2.0 phase 5 wave 5b - ai pool: ocr-pdf, transcription, background composites (5 tools) (#226)

2026-06-13 10:19:47 +08:00

scripts

feat(beautify): add device frame assets and PNG frame compositing

2026-05-08 16:12:46 +08:00

src

feat(enterprise): add SAML 2.0 SSO with SP-initiated login

2026-06-13 22:27:56 +08:00

static

fix: resolve 7 bugs from QA sweep (#208)

2026-06-07 18:27:09 +08:00

drizzle.config.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

package.json

chore: install @node-saml/node-saml and otpauth for Phase 3 identity

2026-06-13 22:04:03 +08:00

tsconfig.json

feat: add Fastify API server with health check and env config

2026-03-22 02:46:34 +08:00