9 commits

Author	SHA1	Message	Date
oliver	92ee170b2e	Enforce multi-user ACL for sessions, settings, and workspaces. ... Bridge UDS identity into DSH RPC via ALS, stamp/filter sessions, auto-provision per-empNo workspaces, and hide Settings/Add-workspace for roles that lack those permissions. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 04:29:48 +08:00
oliver	b3b5b6997e	Fix first-login bootstrap to super_admin; allow admin settings via canAccessSettings. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 03:23:20 +08:00
oliver	9ff9635624	Query user profile via intranet direct HTTP; upgrade/clear trust sessions without department. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 02:50:34 +08:00
oliver	74a86ff832	Fix QR login: pass userSearchUrl into auth middleware for token+empNo verify. ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-08 02:37:08 +08:00
oliver	74ea52667d	Fix duplicate /uds-auth route: drop rpc.handle, register webServer prefix once.	2026-09-08 02:04:57 +08:00
oliver	c9ca785155	Register /uds-auth/qr-start and fix crypto imports for QR login.	2026-09-08 01:54:42 +08:00
oliver	3aca99ca93	Fix uds-auth qr-start 404 by registering route and top-level crypto import.	2026-09-08 01:54:02 +08:00
oliver	505f9dea3f	Restore uds-auth in oclaw: DSH plugin with token+profile auth, settings UI, and pagination.	2026-09-08 01:46:17 +08:00
oliver	8ca42dd973	change log in	2026-09-08 00:28:58 +08:00