ident

4.6 KB

1. # ident — concept (from the creator, 2026-09-24)
3. ident is a login to ident itself (email one-time code). Everything else happens inside ident.
4. ident, tickets and gitoria are PWAs; on the phone ident can register for push notifications.
6. ## In ident
7. - **Account**: you log in to ident with an email code. **There is no registration**: the first
8. successful OTP login creates the user with a default identity, then shows the name fields and
9. clearly states they are optional.
10. - **Time zone**: set to the browser's time zone at first ident use.
11. - **Identities**: a user has a **default identity from the beginning**. If they don't create
12. another one, that one is always chosen. An identity has **no mandatory fields**; it can have
13. nickname, firstname, lastname and an **avatar** (creator, 2026-09-24: apps show it, e.g. in comments). Inside ident it has an **identity name** — that one is shown
14. in the selector.
15. - **One id per app**: an identity gets a different id for every app, so ids are not transferable
16. between apps.
17. - **Apps**: **any ident user can register apps**. An app gets an **API key**. It uses one of two flows.
18. - **The app never exposes the identity id** — it uses it server side only.
19. - **Notifications**: apps never get the real email. To send a notification in an app's name you need
20. that app's API key and the identity id (the one for that app). The user reads them in ident's
21. notifications inbox.
22. - A notification has: **name**, **text**, optional **icon**, optional **action link**. The action link
23. may be any link; the icon may come from any URL (creator, 2026-09-24).
24. - Channels: the **app presets** the channels, the **user can overwrite** them.
25. - **Default: every notification goes to the daily mail**, sent at **17:00 in the user's time zone**.
26. - An app that wants to send **pushes directly must first register that kind of notification**
27. (by its name).
28. - **Urgent** notifications are sent immediately: **push** if the user has registered a push
29. device, **email** otherwise — always within the user's switches (creator, 2026-09-24).
30. - The daily mail at 17:00 in the user's time zone needs **time-zone support in Hybriel** (creator: "hybriel
31. needs time zone support") — ident does not ship its own zone rules.
32. - **Per-app page**: for each app and identity the user has a page showing when they registered
33. in that app and all its notifications (by name), each with **push** and **email** switches, and
34. on top **one override for all**.
35. - **More fields**: if an app needs more data from the user, it asks for it itself when the user
36. registers with their ident id. ident does not hand out more.
37. - **Later**: merge user accounts, move an identity to another account.
38. - **Later**: ident hands over identity properties to the app **during the first handshake** (creator,
39. 2026-09-24: "ident does handover properties during the first handshake, just not yet").
41. ## Flow 1: login button
42. The app shows "login with ident", which sends you to ident and back.
44. ## Flow 2: identity selector
45. - The app's page includes a script from ident, configured with the app's API key.
46. - The script fetches from ident. If the requesting website is registered as an app in ident and
47. uses its API key, ident answers with the identities of the logged-in ident user.
48. - The selector is displayed: a shadow-DOM element in ident's design, which the target website can
49. restyle.
50. - It first says "choose ident". When the user selects an identity, that is the login.
51. - What happens then is up to the app: our apps just switch the frontend to logged in; others
52. might do a reload.
54. ## Decided 2026-09-24 (architect proposal, accepted by the creator)
55. - **Selector knows the website is already logged in**: the host tells the selector (it knows its own
56. session), e.g. `<ident-selector logged-in>` / a property. The selector sets no cookie of its own.
57. Logout on the website = host resets the selector.
58. - **Server-side check of a selection**: selecting hands the script a one-time code; the website's
59. server exchanges it with ident for the identity id. The API key sits in a public script, so server
60. calls (exchange, notifications) use a separate **app secret**.
62. ## In the app
63. The app creates its own user connected to that ident identity by storing the identity id (server side).
65. ## Open
66. - **Client-only apps** (no server to keep the identity id): not figured out yet (creator).
68. ## Not this
69. The mission-003 build (`{id, email, name}` handed to apps, no identities, apps as a config allow
70. list, no selector, no inbox) was built without this concept. Its email-code login to ident and the
71. button redirect flow can be reused; the rest is rebuilt from this document.