dmolinari bce591e63c fix(auth): preserve JWT claim names in bearer middleware ...

JwtBearerOptions.MapInboundClaims defaulted to true, which mapped the
'sub' claim to ClaimTypes.NameIdentifier in HttpContext.User. Logout
endpoint read User.FindFirst("sub") and got null, returning 401 for
any authenticated caller.

Fix: set MapInboundClaims=false and pin NameClaimType="name" so the
JWT claims land in the principal with their original names, aligning
with how JwtService.GetPrincipalFromExpiredToken (used by refresh)
already consumes them.

Unblocks Login_Refresh_Logout_FullFlow integration test (15/15 green).

2026-04-15 11:03:15 -03:00

.atl

chore(udt-001): add skill registry

2026-04-13 21:36:41 -03:00

database

db(auth): add V002__create_refresh_token migration with chain revocation indexes

2026-04-14 13:14:47 -03:00

docs

docs(web): smoke test checklist UDT-002 — login, refresh, logout, reuse detection

2026-04-14 13:52:59 -03:00

scripts

chore(udt-001): RSA key generation script

2026-04-13 21:35:56 -03:00

src

fix(auth): preserve JWT claim names in bearer middleware

2026-04-15 11:03:15 -03:00

tests

feat(api): UDT-003 registro de usuarios — backend completo (Phases 1-6)

2026-04-15 10:47:48 -03:00

.gitignore

chore(repo): gitignore .claude/ local state and autogen src/src.sln

2026-04-14 14:39:38 -03:00

Directory.Packages.props

feat(api): UDT-003 registro de usuarios — backend completo (Phases 1-6)

2026-04-15 10:47:48 -03:00

SIGCM2.slnx

chore(udt-001): repo scaffold with central package management

2026-04-13 21:35:51 -03:00

Description

SIG-CM 2.0 - Sistema de gestión comercial - El Día.

3.4 MiB

Languages

C# 63.9%

TypeScript 29.4%

TSQL 6.1%

CSS 0.5%