coulomb/railiance-apps
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(coulomb): use canonical user service during personal login
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680
This commit is contained in:
tegwick 2026-10-06 20:50:05 +02:00
parent 8a57e37ded
commit 3f8276e0ea
3 changed files with 19 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
charts/coulomb-social/values.yaml
View file

@ -38,7 +38,7 @@ env:
USER_ENGINE_APPLICATION_ID: coulomb-social USER_ENGINE_APPLICATION_ID: coulomb-social
USER_ENGINE_EXPECTED_AUDIENCE: user-engine-portal USER_ENGINE_EXPECTED_AUDIENCE: user-engine-portal
# USER_ENGINE_BASE_URL set via secret or here when stable # USER_ENGINE_BASE_URL set via secret or here when stable
USER_ENGINE_BASE_URL: https://users.92-205-62-239.nip.io USER_ENGINE_BASE_URL: https://users.coulomb.social
NETKINGDOM_REGISTRATION_URL: https://users.92-205-62-239.nip.io/register NETKINGDOM_REGISTRATION_URL: https://users.92-205-62-239.nip.io/register
probes: probes:

2
helm/coulomb-social-values.yaml
View file

@ -19,7 +19,7 @@ env:
OIDC_CLIENT_ID: coulomb-social OIDC_CLIENT_ID: coulomb-social
OIDC_REDIRECT_URI: https://app.coulomb.social/auth/callback/ OIDC_REDIRECT_URI: https://app.coulomb.social/auth/callback/
OIDC_SCOPES: "openid profile email groups" OIDC_SCOPES: "openid profile email groups"
USER_ENGINE_BASE_URL: https://users.92-205-62-239.nip.io USER_ENGINE_BASE_URL: https://users.coulomb.social
USER_ENGINE_APPLICATION_ID: coulomb-social USER_ENGINE_APPLICATION_ID: coulomb-social
USER_ENGINE_EXPECTED_AUDIENCE: user-engine-portal USER_ENGINE_EXPECTED_AUDIENCE: user-engine-portal
NETKINGDOM_REGISTRATION_URL: https://users.92-205-62-239.nip.io/register NETKINGDOM_REGISTRATION_URL: https://users.92-205-62-239.nip.io/register

17
workplans/RAPPS-WP-0015-coulomb-personal-content-release.md
View file

@ -128,3 +128,20 @@ another service. No password was requested/read/exported or reset. Authelia's
current notifier is filesystem rather than SMTP: do not promise emailed recovery current notifier is filesystem rather than SMTP: do not promise emailed recovery
or expose reset tokens from notification files. Any credential reset must use or expose reset tokens from notification files. Any credential reset must use
the owning attended recovery/setup lane under a separate exact approved change. the owning attended recovery/setup lane under a separate exact approved change.
## Personal login 500 correction — 2026-10-06
User confirmed fresh password-reset email receipt, then reported HTTP500 after
authentication. In-pod credential-safe read-only probes with empty claims show
old USER_ENGINE_BASE_URL redirects302 to users.coulomb.social/api/v1/me; canonical
endpoint responds400 to empty claims using the existing service credential. No
identity was created. The application's httpx client does not follow redirects
and raise_for_status rejects302 before establishing its local session.
Correct USER_ENGINE_BASE_URL in chart defaults and production overrides to
https://users.coulomb.social. Preserve immutable image, Secret references,
identity issuer/subject/tenant, PVC and access rules. This completes the already
approved personal app deployment; founder go/interruption approval is recorded
in decision8bbce691-a787-4140-9cd4-df06e8635a27. Use node-side Helm atomic upgrade,
server dry-run and exact manifest diff; rollback revision10 if necessary. T04
remains waiting for successful interactive personal workspace acceptance.