4 Commits

Include renames

Author	SHA1	Message	Date
Bendik Aagaard LynghaugandClaude Opus 5.5	0886869607	Accounts the content mandates, a seed for the first person, and edits suggested by who is responsible ... Every person a page names as responsible gets a Kanidm account at start if they have none, and a mail saying they are listed as responsible for asking that question, with the link to sign in; RESPONSIBLE_GROUP puts them in one group. SEED_ADMIN_EMAIL invites the first person into the most privileged group - the one whose desk may invite into the most - once. Signed in, a responsible person may suggest a change to their own pages; checked on the server, kept, published, and mailed to the site's inbox. Fixes an invite of someone new on a Kanidm with only the onboarding account: the person is created with their address in one call, since idm_people_on_boarding may create but not modify (it answered 403). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GT37Z1Xtfd9pUuQtMTg6Yt	2026-09-29 15:44:20 +02:00
Bendik Aagaard LynghaugandClaude Fable 5	3d51aa1e6a	Sign-in becomes optional: KANIDM_URL unset disables auth cleanly ... A content-only instance (westra preview) has no review desk and no Kanidm client; booting no longer demands one. Auth routes answer 503 'sign-in is not configured on this instance'; everything public renders as usual. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Y42TyF8Zu7NGRR2893vNcZ	2026-09-01 16:54:35 +02:00
Bendik Aagaard Lynghaug	3242482c8e	Redirect back to the originating page after sign-in, not always / ... Sign in link now carries ?redirect=<question_id>; /auth/login stashes it in the session (validated same-site-path-only to avoid an open redirect via a crafted query param), /auth/callback reads it back for the final redirect instead of a hardcoded "/".	2026-08-05 14:40:44 +02:00
Bendik Aagaard Lynghaug	aa1a7fa572	Initial commit: content-driven onboarding portal ... Leptos/Axum app that renders a Question/Alternative/Feature schema loaded from a sibling content repo (portal-content). Kanidm OIDC login, content-driven authorization (Question.qualifies), a generic NATS KV-backed resource + state-transition mechanism (no bespoke "applicant" concept baked into the runtime - it's all content), a SHA-256 DAG chain tying submissions and decisions together, and the "YES - Rasterized Lines" piece (ported from the live uhhm.no site) as the landing hero.	2026-07-29 19:38:40 +02:00