Bind operator sessions to upstream Gitea identity #1373

Merged
rockachopa merged 1 commits from timmy/1372-bind-sessions-upstream-identity into main 2026-08-25 01:33:53 +00:00
Member

Closes #1372

Binds token and passkey sessions to the immutable Gitea user ID resolved at sign-in. Protected requests fail closed before handlers when the process credential changes account, while same-user token rotation remains seamless. Legacy sessions lock for reauthentication; private browser work is preserved. Identity lookup outages return a retryable 503.

Tests: pytest -q (2612 passed, 21 skipped). Frontend core: 102399/102400 gzip bytes.

Closes #1372 Binds token and passkey sessions to the immutable Gitea user ID resolved at sign-in. Protected requests fail closed before handlers when the process credential changes account, while same-user token rotation remains seamless. Legacy sessions lock for reauthentication; private browser work is preserved. Identity lookup outages return a retryable 503. Tests: `pytest -q` (2612 passed, 21 skipped). Frontend core: 102399/102400 gzip bytes.
rockachopa added 1 commit 2026-08-25 01:13:05 +00:00
feat: bind operator sessions to upstream identity (Closes #1372)
All checks were successful
CI / lint (pull_request) Successful in 3m24s
CI / build-release (pull_request) Successful in 7s
CI / browser-journey (pull_request) Successful in 5m49s
CI / release-candidate (pull_request) Has been skipped
d6e6cf2e67
rockachopa merged commit d1adbe72d6 into main 2026-08-25 01:33:53 +00:00
rockachopa deleted branch timmy/1372-bind-sessions-upstream-identity 2026-08-25 01:33:54 +00:00
Sign in to join this conversation.
No reviewers
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#1373
No description provided.