coulomb/coulomb-social
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Wire user-engine HTTP /me for member provisioning (CSOC-WP-0002-T04)

Browse source 
HttpUserEngineClient uses trusted-proxy claims against live user-engine.
Offline stub when URL/secret unset. Align default tenant with KeyCape
tenant:coulomb; map OIDC tenant/principal_type/groups into the envelope.
This commit is contained in:
tegwick 2026-08-09 01:56:44 +02:00
parent a6a380b19f
commit d88767f05b
13 changed files with 325 additions and 48 deletions
Download patch file Download diff file Expand all files Collapse all files

8
workplans/CSOC-WP-0002-netkingdom-user-management-reestablish.md
View file

@ -154,7 +154,7 @@ when running the app with `OIDC_ENABLED=true`.
```task
id: CSOC-WP-0002-T04
status: progress
status: done
priority: high
state_hub_task_id: "bbf8183c-2dd6-448b-a257-8d837d2d5ebf"
```
@ -176,6 +176,12 @@ steps are outside this repo’s authority (NK-WP-0023/0024, USER-WP-*).
**Done when:** login yields a resolvable user-engine projection usable by the
app; second login is idempotent (same user_id).
2026-08-09: `HttpUserEngineClient` calls live user-engine
`GET /api/v1/me` with `X-User-Engine-Proxy-Secret` + verified claims
envelope (iss/sub/tenant/principal_type/aud including user-engine-portal).
Offline stub remains when URL/secret unset. Live probe created
`usr_…` under `tenant:coulomb`.
## T05 — App auth module (OIDC session boundary)
```task