coulomb/coulomb-social
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
50 commits 1 branch 0 tags 724 KiB
Commit graph

8 commits

Author SHA1 Message Date
tegwick
3f30bcd340 Add Forgejo edit/refresh sync path for space content (T05) 
Keep git as source of truth: deep-link to Forgejo editor, manual refresh to
drop cache, and optional signed push webhook for automatic invalidation.
 2026-08-12 03:29:26 +02:00
tegwick
1cedd8f219 Render space pages from Forgejo markdown (CSOC-WP-0004-T04) 
Fetch raw files from Forgejo, sanitize markdown to HTML, and show them on
space detail. Ship a public demo fixture path and seed_demo_space command.
 2026-08-12 01:56:30 +02:00
tegwick
be32432d39 Add Space metadata model and provisional Forgejo content ADR 
Introduce tenant-scoped Space/SpaceMembership with list and detail views.
Document markdown-in-Forgejo as content SoR (ADR-0002). Run migrations on
container start so app.coulomb.social picks up the new tables.
 2026-08-12 01:30:05 +02:00
tegwick
422cd613f6 Add app home Spaces shell and session diagnostics profile menu 
Post-login lands on Spaces empty state instead of a principal dump.
Profile menu exposes Session details with identity, tenant, roles/groups,
and authz diagnostics for operator refinement (CSOC-WP-0004 T01/T07).
 2026-08-11 02:31:55 +02:00
tegwick
29a9ff735e Complete identity smoke path: id_token claims, registration entry, cutover docs 
Prefer verified KeyCape id_token claims when /userinfo returns 401; soft-fail
userinfo. Add CSOC-WP-0003 registration entry (disabled until NetKingdom URL),
AAL step-up hooks, smoke/cutover evidence for tegwick OIDC without MFA.
 2026-08-09 22:42:51 +02:00
tegwick
44439f8d8d Complete flex-auth PEP and document railiance packaging path 
Local + HTTP POST /v1/check PEP with fail-closed transport errors;
shell:view enforced on /app/. Vocabulary docs for T07. Helm chart lives
in railiance-apps; Dockerfile already present for T08.
 2026-08-09 02:00:12 +02:00
tegwick
d88767f05b Wire user-engine HTTP /me for member provisioning (CSOC-WP-0002-T04) 
HttpUserEngineClient uses trusted-proxy claims against live user-engine.
Offline stub when URL/secret unset. Align default tenant with KeyCape
tenant:coulomb; map OIDC tenant/principal_type/groups into the envelope.
 2026-08-09 01:56:44 +02:00
tegwick
01da195c13 Implement NetKingdom identity shell for coulomb.social (CSOC-WP-0002) 
Django scaffold aligned with the business delivery lane: tenant-keyed
Member model without passwords, identity app as sole OIDC/session
boundary, dev-claims login, authenticated /app/ shell, ADR-0001, and
tests. T01/T02/T05/T06 done; OIDC registration, real user-engine HTTP,
flex-auth, and packaging remain open.
 2026-08-09 01:45:05 +02:00