3 Commits

Include renames

Author	SHA1	Message	Date
Bendik Aagaard LynghaugandClaude Fable 5	3d51aa1e6a	Sign-in becomes optional: KANIDM_URL unset disables auth cleanly ... A content-only instance (westra preview) has no review desk and no Kanidm client; booting no longer demands one. Auth routes answer 503 'sign-in is not configured on this instance'; everything public renders as usual. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Y42TyF8Zu7NGRR2893vNcZ	2026-09-01 16:54:35 +02:00
Bendik Aagaard Lynghaug	3242482c8e	Redirect back to the originating page after sign-in, not always / ... Sign in link now carries ?redirect=<question_id>; /auth/login stashes it in the session (validated same-site-path-only to avoid an open redirect via a crafted query param), /auth/callback reads it back for the final redirect instead of a hardcoded "/".	2026-08-05 14:40:44 +02:00
Bendik Aagaard Lynghaug	aa1a7fa572	Initial commit: content-driven onboarding portal ... Leptos/Axum app that renders a Question/Alternative/Feature schema loaded from a sibling content repo (portal-content). Kanidm OIDC login, content-driven authorization (Question.qualifies), a generic NATS KV-backed resource + state-transition mechanism (no bespoke "applicant" concept baked into the runtime - it's all content), a SHA-256 DAG chain tying submissions and decisions together, and the "YES - Rasterized Lines" piece (ported from the live uhhm.no site) as the landing hero.	2026-07-29 19:38:40 +02:00