Skip to content

fix(auth): support first-party native sessions - #83

Merged
Ghost-Frame merged 2 commits into
mainfrom
fix/audit-f02-native-first-party-auth
Aug 1, 2026
Merged

fix(auth): support first-party native sessions#83
Ghost-Frame merged 2 commits into
mainfrom
fix/audit-f02-native-first-party-auth

Conversation

@Ghost-Frame

Copy link
Copy Markdown
Owner

Summary

  • add invite-based first-party registration and password login to the client and CLI
  • keep passwords and invitation tokens in hidden interactive prompts and persist bearer credentials only in the operating system credential store
  • tag stored sessions by provider while migrating existing schema-v1 OIDC metadata without changing its keyring binding
  • route status, refresh, and logout through the matching first-party or OIDC lifecycle
  • document the native account workflow and credential boundaries

Tests

  • cargo test -p frameshift-client -p frameshift-cli --all-targets (237 passed)
  • cargo fmt --all -- --check
  • cargo audit

Add invite registration and password login to the client and CLI.

Persist provider-tagged native sessions while migrating existing OIDC metadata.

Verify first-party and OIDC lifecycle behavior with focused tests.
Store OIDC callback metadata behind stable indirection while preserving the serialized session schema and credential bindings.
@Ghost-Frame
Ghost-Frame merged commit ebb16f4 into main Aug 1, 2026
7 checks passed
@Ghost-Frame
Ghost-Frame deleted the fix/audit-f02-native-first-party-auth branch August 1, 2026 20:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant