coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Make public registration provisioning resumable
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source
This commit is contained in:
tegwick 2026-08-10 11:32:08 +02:00
parent c36a09bded
commit c12bc604a8
4 changed files with 130 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md
View file

@ -90,6 +90,13 @@ the provider-owned password-setup handoff. `ProvisioningRequest` now carries
an optional canonical `preferred_username` through the HTTP adapter without
changing existing callers.
Retry-safe recovery is now implemented for the local-completion/provider-
failure window. A single-use mailbox handle is never replayed; instead,
user-engine returns a separate random resume handle, stores only its SHA-256
digest, retries with the same registration idempotency key and local user,
and invalidates the handle after provider linking. Replay is denied. The full
suite passes 127 tests with 3 environment-dependent skips.
## T03 - Create application profiles on first login
```task