fix(sso): Directory graph live refresh, discovery reconciler, conf layout, vault broker admin roles, and move plugins to directory/conf

2026-08-03 13:54:53 -04:00
parent 8143ef8ca8
commit 70b76c6ed5
10 changed files with 450 additions and 284 deletions
@@ -156,11 +156,12 @@ async function mintAppToken(name) {
 // client's sso auth headers so OpenBao never sees them.

 const VAULT_ADDR = process.env.VAULT_ADDR || 'http://openbao:8200';
+const ADMIN_GROUPS = ['app_sso_admin', 'app_super_admin', 'app_sso_directory_admin'];
 const ADMIN_GROUP = 'app_sso_admin';

 async function isAdmin(user) {
 	try {
-		await permission.byGroup(user, [ADMIN_GROUP]);
+		await permission.byGroup(user, ADMIN_GROUPS);
 		return true;
 	} catch (e) {
 		return false;