tegwick
01da195c13
Django scaffold aligned with the business delivery lane: tenant-keyed Member model without passwords, identity app as sole OIDC/session boundary, dev-claims login, authenticated /app/ shell, ADR-0001, and tests. T01/T02/T05/T06 done; OIDC registration, real user-engine HTTP, flex-auth, and packaging remain open.
23 lines
662 B
Markdown
23 lines
662 B
Markdown
# Identity smoke checklist
|
|
|
|
## Offline (dev claims)
|
|
|
|
1. `uv sync && uv run manage.py migrate && uv run manage.py runserver 8008`
|
|
2. Open `/` → **Sign in**
|
|
3. Dev form → submit subject `smoke-1`
|
|
4. Land on `/app/` with display name and subject shown
|
|
5. **Sign out** → back to landing; `/app/` redirects to login
|
|
6. Sign in again with same subject → single `Member` row (idempotent)
|
|
|
|
## With platform OIDC
|
|
|
|
1. Set `OIDC_ENABLED=true` and issuer/client/redirect env vars
|
|
2. Register redirect URI at the issuer (no wildcards)
|
|
3. `/auth/login/` redirects to IdP; callback creates/links Member
|
|
4. Logout clears app session
|
|
|
|
## Automated
|
|
|
|
```bash
|
|
make test
|
|
```
|