coulomb/coulomb-social
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
50 commits 1 branch 0 tags 724 KiB
Commit graph

7 commits

Author SHA1 Message Date
tegwick
edfdd79208 Finish CSOC-WP-0003 and CSOC-WP-0004; residual intakes for Case B 
Close self-registration workplan with Case A proven and Create account
entry implemented; park public registration enablement and identity
negatives as CSOC-IN-0001/0002. Complete app-shell workplan with T06
operator runbook (seed, bind, webhook, smoke) and smoke doc updates.
 2026-08-12 10:59:25 +02:00
tegwick
f5537d8365 Serve the rebuild on app.coulomb.social; defer apex Bubble cutover 
Document parallel-host strategy: Railiance on app.*, Bubble remains on
coulomb.social until data and self-registration are ready.
 2026-08-09 23:20:30 +02:00
tegwick
29a9ff735e Complete identity smoke path: id_token claims, registration entry, cutover docs 
Prefer verified KeyCape id_token claims when /userinfo returns 401; soft-fail
userinfo. Add CSOC-WP-0003 registration entry (disabled until NetKingdom URL),
AAL step-up hooks, smoke/cutover evidence for tegwick OIDC without MFA.
 2026-08-09 22:42:51 +02:00
tegwick
44439f8d8d Complete flex-auth PEP and document railiance packaging path 
Local + HTTP POST /v1/check PEP with fail-closed transport errors;
shell:view enforced on /app/. Vocabulary docs for T07. Helm chart lives
in railiance-apps; Dockerfile already present for T08.
 2026-08-09 02:00:12 +02:00
tegwick
d88767f05b Wire user-engine HTTP /me for member provisioning (CSOC-WP-0002-T04) 
HttpUserEngineClient uses trusted-proxy claims against live user-engine.
Offline stub when URL/secret unset. Align default tenant with KeyCape
tenant:coulomb; map OIDC tenant/principal_type/groups into the envelope.
 2026-08-09 01:56:44 +02:00
tegwick
76ec8cfe41 Register coulomb-social OIDC client on live KeyCape (CSOC-WP-0002-T03) 
Public PKCE client on kc.coulomb.social with local and production redirect
URIs. Add register-keycape-client.sh, document env, and harden public-client
token exchange (no secret). Authorize probe verified registered vs reject.
 2026-08-09 01:50:51 +02:00
tegwick
01da195c13 Implement NetKingdom identity shell for coulomb.social (CSOC-WP-0002) 
Django scaffold aligned with the business delivery lane: tenant-keyed
Member model without passwords, identity app as sole OIDC/session
boundary, dev-claims login, authenticated /app/ shell, ADR-0001, and
tests. T01/T02/T05/T06 done; OIDC registration, real user-engine HTTP,
flex-auth, and packaging remain open.
 2026-08-09 01:45:05 +02:00