Better Auth + dynamic scoped RBAC (single cohesive change)#848

Open

lane711 wants to merge 22 commits into

mainfrom

feature/better-auth-poc

Commits on Jun 3, 2026

Commits on Jun 4, 2026

feat: RBAC-aware admin sidebar (hide nav items the user can't access)

lane711
and
claude
committed
feat: RBAC scope cells as a colored vertical 3-stop range + legend

lane711
and
claude
committed
feat: server-filter RBAC admin navigation
lane711
committed
fix: move portal access out of RBAC matrix
lane711
committed
fix(auth): Phase 0/1 — fix reset lockout, secret hygiene + convergence plan

committed
feat(rbac): Phase 2 — users.role becomes a derived projection of RBAC

committed
test(auth): e2e regression for BA credential self-heal + reset lockout

committed

Commits on Jun 5, 2026

Commits on Jun 6, 2026

feat(auth): Phase 4–5 cleanup — migration CI, schema sync, plugin deprecation

lane711
and
mmcintosh
committed

Commits on Jun 8, 2026

feat(auth): wire email plugin, remove deprecated JWT plugins from app.ts

lane711
and
mmcintosh
committed