bckelley/cgm-remote-monitor
1
0
Fork 0
mirror of https://github.com/bckelley/cgm-remote-monitor.git synced 2026-08-24 03:14:12 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add comprehensive OIDC actor identity proposal and update documentation

Browse Source 
Add a new OIDC Actor Identity proposal document and update architecture overview, authorization security spec, and replit.md to reference and prioritize OIDC integration.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 71600fc9-5175-4929-b903-5174a32258d2
Replit-Commit-Checkpoint-Type: full_checkpoint
Replit-Commit-Event-Id: 4ccfdfed-74a5-4a42-97f1-13cf3f8352fe
Replit-Helium-Checkpoint-Created: true
This commit is contained in:
bewest
2026-01-19 13:14:21 -08:00
committed by Ben West
parent b048372ee0
commit 3062266ef4
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
replit.md
+7
View File
@@ -29,6 +29,13 @@ The frontend utilizes Webpack for asset bundling and features charting with D3/j
3. **UI Modernization Discovery:** Evaluate new UI technologies and define a migration roadmap.
- **Security:** Brute-force protection for authentication is implemented via `delaylist.js` (IP-based progressive delay).
- **MongoDB Driver 5.x Compatibility:** Updates to handle multi-document writes and race conditions, ensuring correct processing of array inputs for `devicestatus` and WebSocket `dbAdd` operations.
- **OIDC Actor Identity (Proposed - High Priority):** OpenID Connect integration to replace freeform `enteredBy` with cryptographically-verified actor identities. Enables care coordination, audit trails, and delegation tracking. See `docs/proposals/oidc-actor-identity-proposal.md` for full RFC including:
- OAuth2/OIDC protocol flows with NRG Gateway (Ory Hydra/Kratos)
- JWT claims specification with actor and delegation support
- Actor lookup collection schema
- Nightscout Core plugin requirements
- Migration path from `enteredBy` to verified `actor_ref`
- Comprehensive test plan (unit/integration/E2E/security)
### System Design Choices
- **Event-driven architecture** for control plane interactions.