Merge pull request #128 from EqualifyEverything/feat/optional-auth-layer-pr1

feat(auth): optional viewer auth layer (PR1: none + basic + scaffold)

Blake Bertuccelli-Booth committed on May 7, 2026, 05:47 PM

Showing 52 changed files +3155 additions -53 deletions

M AGENTS.md +1

M Makefile +8

A clients/viewer/src/auth/AuthContext.tsx +114

A clients/viewer/src/auth/CallbackPage.tsx +25

A clients/viewer/src/auth/LoginPage.tsx +185

A clients/viewer/src/auth/UserMenu.tsx +64

A clients/viewer/src/auth/apiFetch.ts +63

A clients/viewer/src/auth/types.ts +23

M clients/viewer/src/components/pipeline-viewer/FeedbackModal.tsx +2 -3

M clients/viewer/src/hooks/useFeedbackConfig.ts +2 -3

M clients/viewer/src/hooks/usePipelineViewer.ts +5 -6

M clients/viewer/src/pages/MinimalPage.tsx +2 -3

M clients/viewer/src/pages/PipelineViewerPage.tsx +2

M clients/viewer/src/viewer-main.tsx +25 -4

M docs/explanation/authentication-design.md +39

A docs/how-to/enable-basic-auth.md +95

M docs/reference/authentication.md +45 -4

M pyproject.toml +2

M src/api/pipeline_viewer.py +31 -11

A src/auth/__init__.py +29

A src/auth/audit.py +61

A src/auth/base.py +85

A src/auth/cli.py +46

A src/auth/cookies.py +70

A src/auth/csrf.py +40

A src/auth/dependencies.py +31

A src/auth/factory.py +51

A src/auth/middleware.py +76

A src/auth/providers/__init__.py +1

A src/auth/providers/basic_provider.py +128

A src/auth/providers/none_provider.py +27

A src/auth/routes.py +225

A src/auth/session.py +102

M src/config.py +99 -1

M src/main.py +25 -5

M src/middleware/api_key_auth.py +23 -2

M src/middleware/logging_middleware.py +30 -8

M src/services/session_store.py +17 -1

M tests/conftest.py +8 -1

A tests/conftest_fixtures/auth.py +192

A tests/integration/auth/__init__.py

A tests/integration/auth/test_basic_login_roundtrip.py +154

A tests/integration/auth/test_full_auth_stack.py +100

A tests/integration/auth/test_session_reissue.py +188

A tests/unit/auth/__init__.py

A tests/unit/auth/test_apikey_identity_shortcircuit.py +93

A tests/unit/auth/test_basic_provider.py +63

A tests/unit/auth/test_config_validation.py +81

A tests/unit/auth/test_cookies.py +204

A tests/unit/auth/test_csrf.py +43

A tests/unit/auth/test_session.py +83

M uv.lock +47 -1