Refactor permission management#2090

Open

rteas wants to merge 6 commits intohackforla:developmentfrom

rteas:refactor-permission-management

Commits on Dec 16, 2025

adding middleware auths
rteas
committed

Commits on Dec 24, 2025

fix backend/frontend sync for role/authUtils.js, adding minimumRole for route: /api/projects
rteas
committed

Commits on Feb 23, 2026

Refactoring authutils code backend. Integrating client/fe to use jwt via authcontext. AuthZ code builds on shared/roles and shared/authorizationUtils for a single source of truth for roles/accessLe…
rteas
committed
updating authcontext calls to use methods such as isAdmin(), isSuperAdmin(), hasMinimumRole(), or hasAnyRole() to showcase flexibility/options, also and adding comments to code
rteas
committed

Commits on Mar 10, 2026

Moving refresh secret to use ENV more directly with a fallback. It has also been refactored for easier readability. Fixing expiresAt bug by adding expiresAt to json response to verify-signin. Also …
rteas
committed

Commits on Mar 11, 2026

refactor server secret for access tokens to specify token secret
rteas
committed