coulomb/railiance-apps
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(coulomb): use canonical user service during personal login
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680
This commit is contained in:
tegwick 2026-10-06 20:50:05 +02:00
parent 8a57e37ded
commit 3f8276e0ea
3 changed files with 19 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
charts/coulomb-social/values.yaml
View file

@ -38,7 +38,7 @@ env:
USER_ENGINE_APPLICATION_ID: coulomb-social
USER_ENGINE_EXPECTED_AUDIENCE: user-engine-portal
# USER_ENGINE_BASE_URL set via secret or here when stable
USER_ENGINE_BASE_URL: https://users.92-205-62-239.nip.io
USER_ENGINE_BASE_URL: https://users.coulomb.social
NETKINGDOM_REGISTRATION_URL: https://users.92-205-62-239.nip.io/register
probes:

2
helm/coulomb-social-values.yaml
View file

@ -19,7 +19,7 @@ env:
OIDC_CLIENT_ID: coulomb-social
OIDC_REDIRECT_URI: https://app.coulomb.social/auth/callback/
OIDC_SCOPES: "openid profile email groups"
USER_ENGINE_BASE_URL: https://users.92-205-62-239.nip.io
USER_ENGINE_BASE_URL: https://users.coulomb.social
USER_ENGINE_APPLICATION_ID: coulomb-social
USER_ENGINE_EXPECTED_AUDIENCE: user-engine-portal
NETKINGDOM_REGISTRATION_URL: https://users.92-205-62-239.nip.io/register

17
workplans/RAPPS-WP-0015-coulomb-personal-content-release.md
View file

@ -128,3 +128,20 @@ another service. No password was requested/read/exported or reset. Authelia's
current notifier is filesystem rather than SMTP: do not promise emailed recovery
or expose reset tokens from notification files. Any credential reset must use
the owning attended recovery/setup lane under a separate exact approved change.
## Personal login 500 correction — 2026-10-06
User confirmed fresh password-reset email receipt, then reported HTTP500 after
authentication. In-pod credential-safe read-only probes with empty claims show
old USER_ENGINE_BASE_URL redirects302 to users.coulomb.social/api/v1/me; canonical
endpoint responds400 to empty claims using the existing service credential. No
identity was created. The application's httpx client does not follow redirects
and raise_for_status rejects302 before establishing its local session.
Correct USER_ENGINE_BASE_URL in chart defaults and production overrides to
https://users.coulomb.social. Preserve immutable image, Secret references,
identity issuer/subject/tenant, PVC and access rules. This completes the already
approved personal app deployment; founder go/interruption approval is recorded
in decision8bbce691-a787-4140-9cd4-df06e8635a27. Use node-side Helm atomic upgrade,
server dry-run and exact manifest diff; rollback revision10 if necessary. T04
remains waiting for successful interactive personal workspace acceptance.