coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Expose provider-neutral identity reconciliation
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-07-29 23:41:47 +02:00
parent de2c02dc6d
commit a336f594e7
4 changed files with 189 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

14
workplans/USER-WP-0020-self-service-and-user-administration-portal.md
View file

@ -73,6 +73,14 @@ invokes a provider-neutral provisioning port with roles, correlation, and a
required idempotency key. Remaining API breadth and OpenAPI/outbox work keep
this task in progress.
2026-07-29 increment: `IdentityProvisioningPort` now includes provider-neutral
read-only drift inspection and active reconciliation. The HTTP adapter carries
the same desired identity envelope used for provisioning, returns only
machine-readable differences and changes, and retries one transient dependency
failure under the required idempotency key. NetKingdom's live LLDAP adapter
proved drift detection, convergence, and replay-safe cleanup. Remaining API
breadth and OpenAPI/outbox delivery keep this task in progress.
## T03 - Implement self-service login and registration UX
```task
@ -161,6 +169,12 @@ accessibility, and restore matrix remains.
The admin increment adds explicit regression coverage for missing/wrong CSRF,
required API idempotency, provider-link persistence, and suspension calls.
2026-07-29 evidence: the provider-neutral adapter suite now covers drift
inspection, convergence results, transient retry, and replay-safe identity
cleanup; the full user-engine suite passes 107 tests with three provider
integration skips. A live disposable identity was suspended, reported as
drifted, reconciled to `in_sync`, and removed without leaving directory state.
## T07 - Binky production acceptance
```task