49ab89ae46
Claiming the system administrator role no longer grants access to every application in the installation. Owning a tenant is what lets an administrator administer it; entering the applications running inside it is a separate, explicit grant that can be withdrawn again. Handing it out at claim time gave every installation a standing administrator account inside every customer application, which is the opposite of the boundary this product draws. The behaviour suite now covers single sign-on between applications directly: a second application on the same tenant must receive a code and identify the same person with no sign-in page in between, once Go Loose already holds a session. Also adds theme-token tests against the shared styling contract and store coverage for application grants, and drops the redundant server and security scheme declarations from the published specification. |
||
|---|---|---|
| .. | ||
| account.js | ||
| app.js | ||
| client-login.html | ||
| docs.html | ||
| embed.go | ||
| index.html | ||
| install.html | ||
| login.html | ||
| openapi.json | ||
| profile.html | ||
| profile.js | ||
| roles.html | ||
| roles.js | ||
| style.css | ||
| waiting-room.html | ||