HttpUserEngineClient uses trusted-proxy claims against live user-engine. Offline stub when URL/secret unset. Align default tenant with KeyCape tenant:coulomb; map OIDC tenant/principal_type/groups into the envelope.
18 lines
771 B
HTML
18 lines
771 B
HTML
{% extends "base.html" %}
|
|
{% block title %}Home — {{ site_name }}{% endblock %}
|
|
{% block content %}
|
|
<h1>Signed in</h1>
|
|
<p class="muted">Authenticated shell (CSOC-WP-0002). Content surfaces come later.</p>
|
|
<div class="card">
|
|
<h2 style="margin-top:0;">Principal</h2>
|
|
<dl>
|
|
<dt>Display name</dt><dd>{{ principal.display_name }}</dd>
|
|
<dt>Username</dt><dd>{{ principal.username }}</dd>
|
|
<dt>Tenant</dt><dd>{{ principal.tenant_id }}</dd>
|
|
<dt>Issuer</dt><dd>{{ principal.issuer }}</dd>
|
|
<dt>Subject</dt><dd>{{ principal.subject }}</dd>
|
|
<dt>user-engine id</dt><dd>{{ principal.user_engine_user_id }}</dd>
|
|
<dt>user-engine source</dt><dd>{{ principal.user_engine_source|default:"—" }}</dd>
|
|
</dl>
|
|
</div>
|
|
{% endblock %}
|