coulomb/coulomb-social
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
50 commits 1 branch 0 tags 724 KiB
Commit graph

4 commits

Author SHA1 Message Date
tegwick
edfdd79208 Finish CSOC-WP-0003 and CSOC-WP-0004; residual intakes for Case B 
Close self-registration workplan with Case A proven and Create account
entry implemented; park public registration enablement and identity
negatives as CSOC-IN-0001/0002. Complete app-shell workplan with T06
operator runbook (seed, bind, webhook, smoke) and smoke doc updates.
 2026-08-12 10:59:25 +02:00
tegwick
29a9ff735e Complete identity smoke path: id_token claims, registration entry, cutover docs 
Prefer verified KeyCape id_token claims when /userinfo returns 401; soft-fail
userinfo. Add CSOC-WP-0003 registration entry (disabled until NetKingdom URL),
AAL step-up hooks, smoke/cutover evidence for tegwick OIDC without MFA.
 2026-08-09 22:42:51 +02:00
tegwick
d88767f05b Wire user-engine HTTP /me for member provisioning (CSOC-WP-0002-T04) 
HttpUserEngineClient uses trusted-proxy claims against live user-engine.
Offline stub when URL/secret unset. Align default tenant with KeyCape
tenant:coulomb; map OIDC tenant/principal_type/groups into the envelope.
 2026-08-09 01:56:44 +02:00
tegwick
76ec8cfe41 Register coulomb-social OIDC client on live KeyCape (CSOC-WP-0002-T03) 
Public PKCE client on kc.coulomb.social with local and production redirect
URIs. Add register-keycape-client.sh, document env, and harden public-client
token exchange (no secret). Authorize probe verified registered vs reject.
 2026-08-09 01:50:51 +02:00