RunicGateway/docs
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(android): M10 — native SSO fixes + staff operations scope #30

Merged
whitlocktech merged 1 commits from docs/m10-native-sso-admin into main 2026-07-21 21:33:05 +00:00
Conversation 1 Commits 1 Files Changed 1 +47 -13
wtclaude commented 2026-07-21 21:31:44 +00:00
Member
Copy Link

Documents the M10 work and corrects the app's admin-scope contract.

Changes to docs/android/PLAN.md

  • §1 — narrowed exclusions. The operational admin subset is now in scope for staff: moderation (kick/ban/unban/broadcast), the support (help-page) queue, dashboard + site-mode, and content management (news posts + wiki categories/tags). The only remaining app exclusions are the hero/CMS block editor, Discord-bot config, uo-link config, and OAuth-provider setup.
  • §6.4 — clarified. Self-service stays role-agnostic under /auth/me/*; the operational admin subset now calls /api/v1/admin/** directly, gated by a new STAFF/ADMIN menu access level. Bearer is accepted and role re-checked every request.
  • §9 — new milestone M10 covering the SSO discovery/reachability fixes (native "Sign in with SSO" + picker, no website fallback, encrypted pending PKCE, scrollable drawer, dev stub IdP) and the staff-operations screens.

Companions

AI disclosure (org policy): authored with Claude Code (Claude Opus); AI-authored commits carry a Co-Authored-By: Claude trailer.

🤖 Generated with Claude Code

https://claude.ai/code/session_01NgyHnrNa8WwG3doxvxjuCr

Documents the M10 work and corrects the app's admin-scope contract. ## Changes to `docs/android/PLAN.md` - **§1 — narrowed exclusions.** The operational admin subset is now **in scope for staff**: moderation (kick/ban/unban/broadcast), the support (help-page) queue, dashboard + site-mode, and content management (news posts + wiki categories/tags). The only remaining app exclusions are the **hero/CMS block editor, Discord-bot config, uo-link config, and OAuth-provider setup**. - **§6.4 — clarified.** Self-service stays role-agnostic under `/auth/me/*`; the operational admin subset now calls `/api/v1/admin/**` directly, gated by a new `STAFF`/`ADMIN` menu access level. Bearer is accepted and role re-checked every request. - **§9 — new milestone M10** covering the SSO discovery/reachability fixes (native "Sign in with SSO" + picker, no website fallback, encrypted pending PKCE, scrollable drawer, dev stub IdP) and the staff-operations screens. ## Companions - App: `RunicGateway/Android-app` #21 - Dev tooling: `RunicGateway/website` #91 --- **AI disclosure (org policy):** authored with Claude Code (Claude Opus); AI-authored commits carry a `Co-Authored-By: Claude` trailer. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01NgyHnrNa8WwG3doxvxjuCr
wtclaude added 1 commit 2026-07-21 21:31:45 +00:00
docs(android): M10 — native SSO fixes + staff operations scope e50c6dda2c 
Record the M10 plan and correct the admin-scope contract:

- §1: narrow the app's exclusion list. The operational admin subset is now
  IN scope for staff (moderation, support queue, dashboard/site-mode, content =
  news posts + wiki cats/tags). Only the hero/CMS block editor, Discord-bot
  config, uo-link config, and OAuth-provider setup remain excluded.
- §6.4: self-service stays role-agnostic under /auth/me/*, but the operational
  admin subset now calls /api/v1/admin/** directly, gated by a STAFF/ADMIN menu
  access level; bearer is accepted and role re-checked every request.
- §9: add milestone M10 covering the SSO discovery/reachability fixes (native
  buttons, no website fallback, encrypted pending PKCE, scrollable drawer, dev
  stub IdP) and the staff-operations screens.

Co-Authored-By: Claude <noreply@anthropic.com>
whitlocktech approved these changes 2026-07-21 21:32:59 +00:00
whitlocktech merged commit eba08bc53d into main 2026-07-21 21:33:05 +00:00
whitlocktech deleted branch docs/m10-native-sso-admin 2026-07-21 21:33:06 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
whitlocktech
Labels
Clear labels
bug
Something is not working
duplicate
This issue or pull request already exists
enhancement
New feature
help wanted
Need some help
invalid
Something is wrong
question
More information is needed
wontfix
This won't be fixed
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
ksfixitman whitlocktech wtclaude
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: RunicGateway/docs#30
No description provided.
Delete Branch "docs/m10-native-sso-admin"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?