Bind operator sessions to upstream Gitea identity #1373
No reviewers
Labels
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: stackchain/stackchain-dashboard#1373
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "timmy/1372-bind-sessions-upstream-identity"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Closes #1372
Binds token and passkey sessions to the immutable Gitea user ID resolved at sign-in. Protected requests fail closed before handlers when the process credential changes account, while same-user token rotation remains seamless. Legacy sessions lock for reauthentication; private browser work is preserved. Identity lookup outages return a retryable 503.
Tests:
pytest -q(2612 passed, 21 skipped). Frontend core: 102399/102400 gzip bytes.