Implement NetKingdom identity shell for coulomb.social (CSOC-WP-0002)
Django scaffold aligned with the business delivery lane: tenant-keyed Member model without passwords, identity app as sole OIDC/session boundary, dev-claims login, authenticated /app/ shell, ADR-0001, and tests. T01/T02/T05/T06 done; OIDC registration, real user-engine HTTP, flex-auth, and packaging remain open.
This commit is contained in:
parent
2ec7761504
commit
01da195c13
51 changed files with 2215 additions and 41 deletions
23
docs/identity/smoke.md
Normal file
23
docs/identity/smoke.md
Normal file
|
|
@ -0,0 +1,23 @@
|
|||
# Identity smoke checklist
|
||||
|
||||
## Offline (dev claims)
|
||||
|
||||
1. `uv sync && uv run manage.py migrate && uv run manage.py runserver 8008`
|
||||
2. Open `/` → **Sign in**
|
||||
3. Dev form → submit subject `smoke-1`
|
||||
4. Land on `/app/` with display name and subject shown
|
||||
5. **Sign out** → back to landing; `/app/` redirects to login
|
||||
6. Sign in again with same subject → single `Member` row (idempotent)
|
||||
|
||||
## With platform OIDC
|
||||
|
||||
1. Set `OIDC_ENABLED=true` and issuer/client/redirect env vars
|
||||
2. Register redirect URI at the issuer (no wildcards)
|
||||
3. `/auth/login/` redirects to IdP; callback creates/links Member
|
||||
4. Logout clears app session
|
||||
|
||||
## Automated
|
||||
|
||||
```bash
|
||||
make test
|
||||
```
|
||||
Loading…
Add table
Add a link
Reference in a new issue