SnapOtter ca2ef5b3f4 feat: add OIDC/SSO authentication (#3) ...

Add OpenID Connect (OIDC) authentication alongside existing
username/password login. Users can log in via any standards-compliant
OIDC provider (Keycloak, Authentik, Authelia, Google, Azure AD, Okta)
while preserving full backward compatibility.

- OIDC Fastify plugin with lazy discovery, PKCE, cookie-based sessions
- Login page OIDC button, auth hook updates, settings dialog badges
- 28 integration tests, OIDC setup guide with provider examples
- Fix pre-existing test failures (content-aware-crop, watermark, SVGZ)
- WAL checkpoint fix for SQLite test stability

Closes #3

# Conflicts:
#	apps/api/src/lib/env.ts
#	apps/api/src/routes/tools/watermark-image.ts
#	pnpm-lock.yaml
#	tests/integration/color-palette.test.ts
#	tests/integration/compare.test.ts
#	tests/integration/watermark-image.test.ts

2026-05-14 22:31:26 +08:00

..

api

feat: add OIDC/SSO authentication (#3)

2026-05-14 22:31:26 +08:00

docs

docs: add OIDC setup guide with provider examples

2026-05-13 19:17:14 +08:00

landing

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

web

feat(oidc): update settings dialog with OIDC user handling and logout flow

2026-05-13 19:06:22 +08:00