iamdoubz ba293f8703 spec: single sign-on (12), OpenID Connect and LDAP ...

Owner decisions 2026-10-25: a user connects their OpenID account and signs in with either it or
their password; the admin picks passwords only, OpenID only (admins keep a password way in), or
mixed. No automatic accounts. OIDC sessions re-checked every 15 min with the refresh token;
signing out also signs out at the provider; password sign-ins keep two-step. LDAP is one more way
to check a password. Decision 0004: openid-client and ldapts. Tasks S1-S5.

2026-10-25 13:09:45 -05:00

..

0001-latest-majors.md

workspace: pnpm monorepo with api, web, shared

2026-10-17 14:18:02 -05:00

0002-pg-and-cookie.md

db: drizzle schema matching spec 02, initial migrations, settings service

2026-10-17 15:04:18 -05:00

0003-contrack.md

contacts: Contrack as the robust contacts (C3), picked in Settings or the setup wizard

2026-10-23 15:23:49 -05:00

0004-oidc-ldap.md

spec: single sign-on (12), OpenID Connect and LDAP

2026-10-25 13:09:45 -05:00