NK-WP-0048-T04: SecurityCaseType oidc-browser-relying-party 1.0 (proposed)
Composes key-cape.oidc-client-registration; confidential/public conditions, one justified attended step, threat model, fit table of hand-built clients, Forgejo and public-portal examples. Validator gains when/required_when and provider discovery. 43 tests pass. Adds T08 (identity-provisioner groups ensure). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012
This commit is contained in:
parent
9f49aae925
commit
fa2cb57384
12 changed files with 976 additions and 76 deletions
|
|
@ -29,6 +29,7 @@ parameters that are not custody references, and high-risk types without founder
|
|||
acceptance.
|
||||
|
||||
To start a type: copy `security-case-types/_template/`, rename the directory to
|
||||
the type id, and rewrite every section. The template's tests travel with it.
|
||||
the type id, and rewrite every section. The template's tests travel with it:
|
||||
rename `tests/test_type.py` to `tests/test_<type_id>_contract.py` so module names stay unique.
|
||||
|
||||
Tests: `python3 -m pytest tools/security-case-types/tests security-case-types/*/tests`.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue