Vickey a94b2464a4 feat(mcp): authorize high-risk tool calls and harden auth lifecycle ...

Tool authorization (HIGH-risk confirmation):
- add AuthorizeToolCall RPC; the gateway calls it before tool execution
- sign/consume confirmation tickets with idempotency-key dedup
- propagate x-dc3-ai metadata (riskLevel/destructive/openWorld/idempotent) from the scan through the registry to the tool catalog

OAuth hardening:
- rotate refresh tokens and revoke the authorization on replay via previous_refresh_token_hash

Password lifecycle:
- require password change on login when flagged or expired (R20303/R20304)
- expose a public POST /token/change_password endpoint

OpenAPI aggregation:
- switch McpOpenApiAggregator to classpath static snapshots, dropping the runtime fetch and McpAggregatorProperties

2026-06-18 14:08:05 +08:00

..

dc3-api-auth

feat(mcp): authorize high-risk tool calls and harden auth lifecycle

2026-06-18 14:08:05 +08:00

dc3-api-data

refactor(data): unify command history status/type/source to enum index

2026-06-09 18:05:40 +08:00

dc3-api-driver

feat: update pom version to 2026.5.22

2026-05-26 00:30:11 +08:00

dc3-api-manager

feat: update pom version to 2026.5.22

2026-05-26 00:30:11 +08:00

pom.xml

feat: update pom version

2026-06-06 13:00:39 +08:00