Files
freemo b0ab61134d feat(server): implement authentication, authorization, and namespace service
Implement server-mode services for multi-tenant deployments:

- TokenAuthClient: SHA-256 hashed bearer-token authentication with
  configurable TTL, register/revoke/validate operations, and
  constant-time comparison for timing side-channel protection
- AuthorizationService: Namespace-scoped role-based access control
  with viewer/member/admin/owner hierarchy and grant/revoke/check_access
- NamespaceService: In-memory namespace registry with list/show/members
  endpoints backing _cleveragents/namespace/* A2A extension methods
- HealthService: Aggregated health-check probe registry returning
  composite healthy/unhealthy status with per-service details
- DiagnosticsService: Runtime diagnostics collector (Python version,
  platform, uptime, loaded modules, custom checks)
- Server DB tables: server_users, server_tokens (SHA-256 hashed),
  namespace_acls with Alembic migration s1_001
- Facade wiring: namespace/health/diagnostics handlers dispatch to
  real services when registered, fall back to stubs otherwise
- Behave BDD: 23 scenarios covering all services and facade wiring
- Robot integration: 11 test cases with helper script

ISSUES CLOSED: #927
2026-04-02 09:48:43 +00:00
..
2026-02-23 03:11:12 +00:00