uhhm/portal
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 89 Wiki Activity

Memberships: groups kept by portal itself, a person by phone number first #6

Merged
bl merged 2 commits from memberships into main 2026-09-30 11:33:12 +00:00
Conversation 0 Commits 2 Files Changed 24
+948 -65
bl commented 2026-09-30 11:28:29 +00:00
Owner
Copy Link
Copy Source

A membership is a case in portal_memberships (invited, active, removed), matched at sign-in on the provider's subject, phone number or address. PEOPLE_BACKEND=memberships switches a site; Kanidm stays the default when it has a token. The NATS access service answers for a person named by phone or email. Docs: docs/memberships.md.

🤖 Generated with Claude Code

https://claude.ai/code/session_01GT37Z1Xtfd9pUuQtMTg6Yt

A membership is a case in `portal_memberships` (invited, active, removed), matched at sign-in on the provider's subject, phone number or address. `PEOPLE_BACKEND=memberships` switches a site; Kanidm stays the default when it has a token. The NATS access service answers for a person named by phone or email. Docs: `docs/memberships.md`. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01GT37Z1Xtfd9pUuQtMTg6Yt
bl added 1 commit 2026-09-30 11:28:30 +00:00
Memberships: groups kept by portal itself, a person by phone number first
Test / test (pull_request) Successful in 58s
Details
f047e21c4a 
A membership is a case in the built-in portal_memberships bucket:
invited by a desk, a grants, the seed or the responsible pass; active
from the person's first sign-in, when the provider's subject, phone
number or address matches the record; removed by a desk, and invited
again after that. One record per group and person however it was
keyed, and at sign-in every record that matched learns what the
provider verified. The active memberships join the groups claim, so
Cedar sees the same parents as before.

PEOPLE_BACKEND picks Kanidm or memberships; unset, a KANIDM_API_TOKEN
means Kanidm. The NATS access service looks a person's groups up when
a question names them by sub, phone or email and lists none. The
sign-in asks for the phoneNumber scope and reads it from userinfo.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GT37Z1Xtfd9pUuQtMTg6Yt
bl added 1 commit 2026-09-30 11:31:25 +00:00
Docs as a site: portal.uhhm.no from docs/ with mdBook, put to git-pages
Test / test (pull_request) Successful in 58s
Details
a9b5a81ebd 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GT37Z1Xtfd9pUuQtMTg6Yt
bl merged commit 23f98add51 into main 2026-09-30 11:33:12 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
bl (Bendik Lynghaug)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: uhhm/portal#6