coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Deploy KeyCape-backed portal login edge
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-07-28 00:39:22 +02:00
parent eac9d655b0
commit 9a486c3531
5 changed files with 145 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
workplans/NK-WP-0023-user-engine-portal-platform-integration.md
View file

@ -68,6 +68,14 @@ provide safe password and MFA enrollment/recovery handoffs. Preserve
platform-root separation and ensure tenant administration never implies
platform authority.
2026-07-27 implementation evidence: `user-engine-portal` is registered as a
public static KeyCape client with an exact callback and S256 PKCE. The portal
is live at `https://users.92-205-62-239.nip.io`, has a trusted ACME
certificate, begins the KeyCape/Authelia flow, and rejects an unregistered
callback. KeyCape image `key-cape:e8b4ede` maps an unambiguous
`tenant:<kind>:<slug>:users|admins` directory group envelope into the tenant
and coarse tenant-admin claims while refusing ambiguous multi-tenant mapping.
## T04 - Integrate authorization, email, audit, and events
```task