coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record recovery rollout and authoritative access catalogue follow-up
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
This commit is contained in:
tegwick 2026-09-12 10:50:35 +02:00
parent e54b6ee970
commit 90d809a486
2 changed files with 31 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workplans/USER-WP-0025-operator-navigation-and-logout.md
View file

@ -102,7 +102,7 @@ not claimed by this portal release.
```task
id: USER-WP-0025-T03
status: todo
status: progress
priority: medium
state_hub_task_id: "f5ee70b9-f169-5316-af3e-5dbbdd394d57"
```
@ -114,3 +114,8 @@ KEY-WP-0025 and docs/operations.md. Do not claim global logout or JWT revocation
from User Engine's cookie deletion. Use registered return locations and verify
same-account login cannot silently reappear after complete sign-out. Preserve
session-only logout for users who intend to keep their other applications open.
2026-09-12: shared sign-out implemented with USER-WP-0026 and KEY-WP-0034.
Portal logout hands off to explicit issuer confirmation, then provider-owned
Authelia logout with a fixed portal return. Actual signed-in account switching
awaits operator browser evidence; already issued JWTs are not revoked.