ident

5.2 KB

1. # Mission 004 (old 007) — ident 3/6: identity selector (ticket #26)
3. One-shot worker. The architect (Claude Code on Byrodin) verifies your report, then the creator tests.
5. ## Read first — in this order
6. 1. **`loreana:/media/STORAGE/projects/ident.worldapi.org/CONCEPT.md`** — the creator's concept, source
7. of truth. Section "Flow 2: identity selector" and "Decided 2026-09-24" are this mission. Do not add
8. features it does not describe; where it is silent, make the smallest choice and list it under
9. "Questions for the creator".
10. 2. The app's `README.md` and `STATUS.md` (pieces 1 and 2 done and confirmed by the creator; piece 2 =
11. apps, API key + secret, per-app identity ids, login button, `POST /api/exchange`).
12. 3. `/CONTAINERS/projects/antcolony/README.md` (section "Lessons learned").
13. 4. Ticket: `GET http://100.77.141.84:8350/api/tickets/26`.
15. ## Hybriel (standard block)
16. Read `/CONTAINERS/projects/antcolony/docs/hybriel-for-app-workers.md` first — it lists which docs to
17. trust, the known pitfalls with workarounds (#31 forged face sessions, #36 face names are global), and
18. the open hybriel tickets. Report new Hybriel findings under "Hybriel issues"; do not edit that guide.
20. ## Where
21. - Host Loreana (`ssh loreana`, fish login shell → `bash -c '…'` or script files).
22. - App: `/media/STORAGE/projects/ident.worldapi.org`, dev port **8351**; test app `testapp/` on **8354**.
23. Hybriel repo READ ONLY.
25. ## Scope (piece 3 of 6)
26. From the concept:
27. - The app's page includes **a script from ident, configured with the app's public API key**.
28. - The script **fetches from ident** (with credentials). ident answers with the identities of the
29. signed-in ident user **only if** the request comes from one of that app's registered origins and
30. carries its API key (CORS: exact origin + credentials, never `*`).
31. - The selector is a **shadow-DOM element in ident's design** that the host page **can restyle**
32. (document how: CSS custom properties and/or `::part`).
33. - It first says **"choose ident"**. **Selecting an identity is the login**: ident hands the script a
34. **one-time code** (same rules as the button flow's code), the script gives it to the host page (e.g. a
35. DOM event); the **host's server exchanges it** with `POST /api/exchange` (key + secret) → per-app id.
36. - **The host tells the selector it is logged in** (`logged-in` attribute / property). The selector sets
37. no cookie of its own. Logout on the website = the host resets the selector.
38. - What happens after login is up to the app: **the test app switches its frontend to logged in
39. without a reload** (our apps' behaviour).
40. Where the concept is silent (make the smallest choice, list it): what the selector shows when the user
41. is not signed in to ident (e.g. a link into the existing login button flow); what it shows in the
42. logged-in state; how the host restyles it.
44. Extend the test app (`testapp/`) to use the selector, keeping its login button too.
46. **Out of scope**: notifications (#27+), foreign-domain / Safari-Firefox third-party cases (all our
47. apps are same-site; dev ports on one IP count as same-site too), client-only apps.
49. Also, only if you can read it without being refused: fix the 2 obsolete checks in the piece-1 gate
50. `tests/browser.mjs` (ticket #37 — they expect `/login` and `/api/exchange` to be gone; replace them
51. with checks of the current behaviour). If reading it is refused, leave it and say so.
53. ## Mail — IMPORTANT (unchanged)
54. The dev server on :8351 sends **real mail**. Never trigger an OTP on :8351; don't run
55. `tests/dev-smoke.mjs` against it. Your gate starts its own servers with `IDENT_MAIL_SINK`.
56. **Do not read, print, copy or edit any `.env`.** At the end restart :8351 (only the PID in
57. `server.pid`) and the test app (only the PID in `testapp/testapp.pid`) and check both answer 200
58. without logging in.
60. ## Data
61. The dev store holds the creator's account and a registered app. Back up `storage/` (and `.sessions/`)
62. to `.scratch/storage-backup-<ts>/` before the restart; migrate, never wipe. Verify afterwards
63. (read-only, on a copy) that accounts, identities, apps and connections are still there. The test
64. app's own `testapp/storage/` holds the creator's key/secret setup — keep it.
66. ## Rules
67. - No git. Don't touch other project folders. Only kill your own PIDs or the ones in ident's pid files.
68. Clean up headless Chromes (`--disable-gpu`). Scratch in `.scratch/`.
69. - Do NOT POST to the live tickets server (:8350).
70. - A test is the whole process: real headless browsers — signed in to ident on the ident origin, then
71. the test app's page on its own origin shows the selector with the right identities, select → code →
72. host exchange → test app switches to logged in without reload → `logged-in` state → host logout
73. resets. Negatives: unregistered origin / wrong key gets no identities; signed out of ident gets no
74. identities; forged face sessions (#31); code reuse; a restyle by the host actually changes the look.
75. - Strict API as before. Screenshots at 390px and 1280px (selector closed and open), look at them.
76. - Update `README.md` ("How apps use ident": the selector snippet a host needs) and `STATUS.md`.
77. Do NOT edit `CONCEPT.md`.
79. ## Report (final answer, this structure)
80. ```
81. ## Done
82. ## Verified (each: command run + observed output)
83. ## Not verified / open
84. ## Hybriel issues (repro, observed, expected)
85. ## Questions for the creator
86. ## Running (URL, PID, log path)
87. ```