Block a user
Authentik provider + groups one-time setup for OIDC login and client enrollment
NPM proxy host missing for dev-lisilou.jerodrigged.com [RESOLVED]
Prod (CT111) api/.env is a blank template — no admin login, notifications, calendar, or SSO
Gitea API token needs read:issue + write:issue scope for agent workflows
Client portal: /my-bookings for logged-in clients
Client portal: /my-bookings for logged-in clients
Confirmed implemented in commit 84fdfdf (2026-07-16, overnight session): GET /api/my-bookings, owner-gated contract download at GET /api/my-bookings/:id/contract, src/my-bookings.html, nginx…
Sign out should also end the Authentik SSO session (RP-Initiated Logout)
Follow-up after the initial fix: found and fixed two related bugs during verification.
- First RP-Initiated Logout attempt was app-scoped only -- Authentik's `default-provider-invalidation-fl…
Authentik OIDC authentication for the admin dashboard
Authentik OIDC authentication for the admin dashboard
Implemented:
- Created OAuth2/OIDC Provider + Application
lisilou-portfolioin Authentik via API (client_type=confidential, implicit-consent flow, per-provider issuer, scope mappings for…
Google Calendar integration for date availability
Booking management dashboard with payment details
Sign out should also end the Authentik SSO session (RP-Initiated Logout)