Add `/check-header` endpoint with caching, distributed locking, and LDAP authorization for Kerberos/SPNEGO#23

Open

semidark wants to merge 18 commits into

caltechads:masterfrom

semidark:kerberos-support

Commits on Feb 12, 2026

ADD: stateless header-based authorization endpoint for Kerberos/SPNEGO support
semidark-kiki
committed
FIX: code review improvements for header-based auth
semidark-kiki
committed
IMPROVE: LRU lock cleanup and Kerberos/SPNEGO documentation
semidark-kiki
committed
REFACTOR: rename cache.py to header_auth_cache.py for clarity
semidark-kiki
committed
DOCS: update README with Kerberos/SPNEGO support
semidark-kiki
committed
Merge branch 'security/authorization-filter-header' into kerberos-support
semidark-kiki
committed
Update header_auth.py to respect allow_authorization_filter_header setting
semidark-kiki
committed
Merge branch 'caltechads:master' into kerberos-support
semidark
authored
DOCS: update AGENTS.md with current project structure and conventions
semidark-kiki
committed

Commits on Feb 20, 2026

Commits on Feb 23, 2026

Merge branch 'caltechads:master' into kerberos-support
semidark
authored
Doc: Add Upstream Divergence Guidance
Nico Thomaier
committed
Doc: Incooperate cursor rules from upstream Repo
Nico Thomaier
committed
Harden header-auth cache, startup validation, and Duo path list
Nico Thomaier
committed

Commits on Apr 14, 2026

SECURITY: require effective LDAP authorization filter across all auth paths
Nico Thomaier
committed
docs: add Podman quadlet deployment guide
Nico Thomaier
committed
Fix None auth-filter guard and align linted tests
Nico Thomaier
committed