• v0.5.7 cc26a232ec

    v0.5.7
    docs / deploy (push) Failing after 3s
    Test / test (push) Successful in 58s
    Publish release / publish (push) Successful in 3m21s
    Stable

    gitea-actions released this 2026-09-30 11:33:15 +00:00 | 232 commits to main since this release

    • Memberships: groups kept by portal itself (src/memberships.rs, docs/memberships.md). A membership is a case in the built-in portal_memberships bucket - invited by a desk, a grants, the seed or the responsible pass; active from the person's first sign-in, when the provider's subject, phone number or address matches; removed by a desk. A person is their phone number first (+4791234567, PHONE_COUNTRY for bare numbers), their address second, the provider's subject third, and one record per group and person however it was keyed. At sign-in the active memberships join the groups claim, so Cedar sees the same parents as before. PEOPLE_BACKEND=memberships switches a site; unset, a KANIDM_API_TOKEN means Kanidm and no token means memberships. SEED_ADMIN_PHONE seeds by number. The sign-in asks for the phoneNumber scope and reads phone_number from userinfo.
    • The NATS access service answers for a person named by sub, phone or email with no groups listed: their memberships are looked up first.
    • who_for (the person a grants is about) takes navn as well as name, and a phone number in place of an address.
    • The invite mail for someone who needs no link says where to sign in.
    Downloads