wmantly
1e38ef8dc5
The per-host "Allowed groups" field suggested only local groups, permission subjects and conf.auth maps. None of those can ever match an SSO-gated host: its allow-list is checked against the `groups` claim the SSO issues (utils/host_sso.js), so only SSO groups are candidates. Adds a conf.sso block (url + read-only apiToken, minted by theta-suite's bootstrap) and a cached /api/group lookup merged into the suggestions. Degrades silently to the previous local-only list when unset, and never fails the request. Authenticates with `Authorization: Bearer <token>` -- the SSO's `auth-token` header is for browser session UUIDs and rejects a minted API token. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Documentation
This directory contains the GitHub Pages documentation site for the Proxy project.
Live site: https://theta42.github.io/proxy/
Pages
index.md- Home page with project overviewinstallation.md- Installation and setup guideapi.md- Complete API referencearchitecture.md- System architecture and designcontributing.md- Development and contribution guide
Local Preview
To preview the site locally:
# Install Jekyll (one-time setup)
gem install jekyll bundler
# Run local server
cd docs
jekyll serve
# View at http://localhost:4000/proxy/
Theme
The site uses the Cayman theme (jekyll-theme-cayman). Configuration is in _config.yml.
Updating Documentation
- Edit markdown files in this directory
- Commit and push to master branch
- GitHub Pages automatically rebuilds (may take 1-2 minutes)
- Changes visible at https://theta42.github.io/proxy/