Django scaffold aligned with the business delivery lane: tenant-keyed Member model without passwords, identity app as sole OIDC/session boundary, dev-claims login, authenticated /app/ shell, ADR-0001, and tests. T01/T02/T05/T06 done; OIDC registration, real user-engine HTTP, flex-auth, and packaging remain open.
662 B
662 B
Identity smoke checklist
Offline (dev claims)
uv sync && uv run manage.py migrate && uv run manage.py runserver 8008- Open
/→ Sign in - Dev form → submit subject
smoke-1 - Land on
/app/with display name and subject shown - Sign out → back to landing;
/app/redirects to login - Sign in again with same subject → single
Memberrow (idempotent)
With platform OIDC
- Set
OIDC_ENABLED=trueand issuer/client/redirect env vars - Register redirect URI at the issuer (no wildcards)
/auth/login/redirects to IdP; callback creates/links Member- Logout clears app session
Automated
make test