mirror of
https://github.com/trustgraph-ai/trustgraph.git
synced 2026-05-19 20:35:13 +02:00
da7d10e995
Adds `no-auth-svc`, a lightweight IAM service that permits all access unconditionally — no database, no bootstrap, no signing keys. Deploy it in place of `iam-svc` for development, demos, and single-user setups where authentication overhead is unwanted. The gateway no longer hard-codes a 401 on missing credentials. Instead it asks the IAM regime via a new `authenticate-anonymous` operation whether token-free access is allowed. This keeps the gateway regime-agnostic: `iam-svc` rejects anonymous auth (preserving existing security), while `no-auth-svc` grants it with a configurable default user and workspace. Includes a tech spec (docs/tech-specs/no-auth-regime.md) and tests that pin the safety boundary — malformed tokens never fall through to the anonymous path, and a contract test ensures the full iam-svc always rejects `authenticate-anonymous`. |
||
|---|---|---|
| .. | ||
| test_auth.py | ||
| test_capabilities.py | ||
| test_config_receiver.py | ||
| test_core_import_export_roundtrip.py | ||
| test_dispatch_config.py | ||
| test_dispatch_manager.py | ||
| test_dispatch_mux.py | ||
| test_dispatch_requestor.py | ||
| test_dispatch_sender.py | ||
| test_dispatch_serialize.py | ||
| test_endpoint_constant.py | ||
| test_endpoint_i18n.py | ||
| test_endpoint_manager.py | ||
| test_endpoint_metrics.py | ||
| test_endpoint_socket.py | ||
| test_endpoint_stream.py | ||
| test_endpoint_variable.py | ||
| test_entity_contexts_import_dispatcher.py | ||
| test_explain_triples.py | ||
| test_graph_embeddings_import_dispatcher.py | ||
| test_rows_import_dispatcher.py | ||
| test_running.py | ||
| test_service.py | ||
| test_socket_graceful_shutdown.py | ||
| test_streaming_translators.py | ||
| test_text_document_translator.py | ||