Skip to content

feat: policy signature flow#7366

Open
vitormattos wants to merge 645 commits intomainfrom
feat/policy-signature-flow-phase1-groundwork
Open

feat: policy signature flow#7366
vitormattos wants to merge 645 commits intomainfrom
feat/policy-signature-flow-phase1-groundwork

Conversation

@vitormattos
Copy link
Copy Markdown
Member

@vitormattos vitormattos commented Apr 1, 2026 •
edited
Loading

No description provided.

@github-project-automation github-project-automation bot moved this to 0. Needs triage in Roadmap Apr 1, 2026
@vitormattos vitormattos force-pushed the feat/policy-signature-flow-phase1-groundwork branch 2 times, most recently from d422bd0 to da50ad0 Compare April 7, 2026 15:51
@vitormattos vitormattos changed the title feat: policy signature flow phase1 groundwork feat: policy signature flow Apr 7, 2026
@vitormattos vitormattos force-pushed the feat/policy-signature-flow-phase1-groundwork branch 2 times, most recently from 6146425 to 6e4ab74 Compare April 9, 2026 14:47
@vitormattos
test(settings): align docmdp settings assertions
ad99809 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
refactor(ui): align docmdp settings presentation
642fa90 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test(identify): remove legacy appconfig fallback assertions
4749661 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test(policy): align service expectations with strict typed values
107f0f1 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test(policy): update signature flow provider normalization checks
34958a0 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test(policy): update registry normalization expectations
3e389a8 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test(policy): align source behavior with strict typed reads
e1d3412 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test(request): align request signature flow expectations
b63b5f2 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat(policy): add docmdp policy provider
5694133 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat(ui): add docmdp scalar rule editor
c658b29 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test(policy): add docmdp provider unit coverage
d17377e 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
fix(openapi): add docmdp policy snapshot to api schema
7be5af0 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
fix(openapi): mirror docmdp snapshot schema in full spec
9e7f943 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
fix(types): align openapi snapshot typing for docmdp
d850394 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
fix(types): mirror docmdp snapshot typing in full types
fa00500 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
fix(api): define docmdp policy snapshot metadata type
256df6a 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
chore(openapi): regenerate api specification
04730f0 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
chore(openapi): regenerate full api specification
1356fe2 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
chore(types): regenerate openapi types
e81e172 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
chore(types): regenerate full openapi types
c5be4e5 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test(e2e): stabilize policy workbench persistence scenario
6ef498f 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test(integration): normalize identify methods setup in admin initial …
a6b2e64 
…state

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
fix(identify-method): normalize identify_methods when stored as wrong…
f9286f8 
… type

When the Nextcloud provisioning API is used to set the identify_methods
config key, it always writes using setValueString(), causing a type
conflict when LibreSign later reads the key with getValueArray().

Catch AppConfigTypeConflictException in getSavedSettings(), read the
raw string value, delete the mistyped key and re-store it as an array
type. This allows invalid string values stored via provisioning API to
be transparently normalized on the next read.

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: expose assigned user policy response
c940d80 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: extend policy source user policy contract
7392c67 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: persist explicit assigned user policies
3ebed03 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: resolve assigned user policy layers
7f3f5ad 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: store assigned user policy payloads
0faac4f 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
chore: refresh administration openapi user policy schema
2282e36 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
chore: refresh full openapi user policy schema
e4da6c8 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: harden sequential signer playwright flow
208a290 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: keep delegated policies menu visible
ddbd4c1 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: add playwright app config helpers
2364224 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: send assigned user policy override flag
ebe7e72 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: cover assigned user policy store payloads
4c11a9a 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: cover assigned user policy workbench flows
d883f94 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: add assigned user policy frontend type
1ed260d 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
chore: refresh administration openapi frontend types
88d8b44 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
chore: refresh full openapi frontend types
c023d0c 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: label assigned user policy in preferences
d3296d1 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: show user customization toggle in rule editor
7d19aee 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: keep signature flow override toggle visible
0bd101f 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: allow signature flow child override settings
725321f 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: default mock policy overrides to enabled
9b99a76 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
feat: map assigned user policies in workbench
76a9f6e 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: cover assigned user policy api flow
6e7a683 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: update policy controller assigned user cases
8f328ff 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: update policy service assigned user cases
a9ce30a 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: cover assigned user policy resolution
6f2f801 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: fix policy context factory dependency
e074d09 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: cover assigned user policy persistence
0317b3a 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
fix: add cRLSign usage to openssl root CA
b43b345 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
test: enforce explicit CRL signature verification
20bb353 
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

Roadmap
Status: 0. Needs triage

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vitormattos