Add GET /api/catalog/services/ - a password-protected JSON endpoint that
returns the full technical service catalog (services, providers, versions,
plans) for documentation tooling. No pricing, no per-tenant filtering.

- Extract SettingsBasicAuthPermission base; add CatalogBasicAuthPermission
  and migrate OSBBasicAuthPermission (bare `return False` -> proper 403).
- build_catalog() returns a host-independent, cache-safe dict; the view
  short-caches it and resolves logo -> logo_url per request.
- Versions reflect what the user sees in the create form: read the resolved
  version field's choices (schema enum, narrowed by form_config), fail-soft.
- Plans come from ComputePlanCatalogEntry (non-stale), Decimals as strings.
- CATALOG_USERNAME/PASSWORD/CACHE_SECONDS settings.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tobru added 2 commits

2026-07-07 12:23:32 +00:00

document new env vars 62e38c6fa1

document missing env vars f79ed0cd77

tobru merged commit c81a032a53 into main

2026-07-07 12:23:48 +00:00

tobru deleted branch service-catalog-ep

2026-07-07 12:23:49 +00:00

tobru referenced this pull request from a commit

2026-07-07 12:23:49 +00:00

Merge pull request 'Service Catalog Read-Only API for Documentation' (#602) from service-catalog-ep into main