Add LDAP Distinguished Name Helper and Credential Audit Context
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled

- Implemented LdapDistinguishedNameHelper for escaping RDN and filter values.
- Created AuthorityCredentialAuditContext and IAuthorityCredentialAuditContextAccessor for managing credential audit context.
- Developed StandardCredentialAuditLogger with tests for success, failure, and lockout events.
- Introduced AuthorityAuditSink for persisting audit records with structured logging.
- Added CryptoPro related classes for certificate resolution and signing operations.
This commit is contained in:
master
2025-11-09 12:21:38 +02:00
parent ba4c935182
commit 75c2bcafce
385 changed files with 7354 additions and 7344 deletions

View File

@@ -1,9 +0,0 @@
# Worker SDK (Go) Task Board — Epic 9
| ID | Status | Owner(s) | Depends on | Description | Exit Criteria |
|----|--------|----------|------------|-------------|---------------|
| WORKER-GO-32-001 | TODO | Worker SDK Guild | ORCH-SVC-32-005 | Bootstrap Go SDK project with configuration binding, auth headers, job claim/acknowledge client, and smoke sample. | `go test ./...` green; sample worker claims job against local orchestrator; README outlines usage; compliance checklist recorded. |
| WORKER-GO-32-002 | TODO | Worker SDK Guild | WORKER-GO-32-001 | Add heartbeat/progress helpers, structured logging hooks, Prometheus metrics, and jittered retry defaults. | Heartbeat/progress methods documented; metrics exported; integration test verifies heartbeat timeout handling; lint/staticcheck clean. |
| WORKER-GO-33-001 | TODO | Worker SDK Guild | WORKER-GO-32-002, ORCH-SVC-33-003 | Implement artifact publish helpers (object storage client, checksum hashing, metadata payload) and idempotency guard. | Artifact upload API tested with fake object store; idempotency violations return typed error; docs include sample. |
| WORKER-GO-33-002 | TODO | Worker SDK Guild | WORKER-GO-32-002 | Provide error classification/retry helper, exponential backoff controls, and structured failure reporting to orchestrator. | Error helper maps to orchestrator error classes; retries configurable; integration test covers HTTP 5xx, validation errors; docs updated. |
| WORKER-GO-34-001 | TODO | Worker SDK Guild | WORKER-GO-33-001, ORCH-SVC-34-001 | Add backfill range execution helpers, watermark handshake utilities, and artifact dedupe verification for backfills. | Backfill helper handles window chunks; watermark handshake verified in integration test; dedupe proof recorded; offline kit sample updated. |