13 - API (feat): Move Authn/z to Edge Guards - #239

Draft

RobertRosca wants to merge 8 commits into

feat/advanced-alchemy-appdbfrom

feat/authz-edge-guards

Commits on Jul 20, 2026

feat(api/auth): add proposal-membership policy and edge guard
RobertRosca
committed
fed0374
refactor(api/gql): move permission classes to shared/permissions.py
RobertRosca
committed
82bd849
feat(api/main): enforce proposal membership at the REST edge
RobertRosca
committed
8762728
refactor(api/metadata): drop authorization from metadata services
RobertRosca
committed
901cdc3
fix(api/auth): return 401 for unauthenticated GraphQL requests
RobertRosca
committed
d23aa51
fix(frontend): redirect to login on 401 from GraphQL
RobertRosca
committed
0b1c13e
test(api/auth): cover the proposal-membership policy and guard
RobertRosca
committed
204536a
docs(api/adr): add ADR-011 authorisation at the edge and sweep refs
RobertRosca
committed
bae7552