Matt Mabrey 358469531c D18: revise T13.1 to idle timeout + absolute ceiling ...

Matt asked whether idle time would be a better fit than a flat session
length. It is, but idle-alone weakens D18's own purpose - a continuously
active session would never force a fresh Okta recheck on its own. Decided:
both. AUTH_IDLE_MINUTES (new, default 30) slides the session on activity;
AUTH_SESSION_HOURS (existing var, meaning changes to an absolute ceiling,
default 12 -> proposed 8) caps it regardless of activity.

Docs only in this commit - implementation is T13.1, next.

2026-09-23 11:38:37 -07:00

backups

Productionize WP Suite: auth, security hardening, sync, dashboard, PWA, email

2026-07-15 17:51:15 -07:00

docs

D18: revise T13.1 to idle timeout + absolute ceiling

2026-09-23 11:38:37 -07:00

html

T11.2: capture usage events (CR-019)

2026-09-23 11:24:49 -07:00

nginx

NGINX: set Cache-Control via a map, not a nested location, so security headers survive

2026-08-03 22:37:18 -07:00

scripts

Add entrypoint fallback for missing bind-mounted scripts

2026-08-04 18:44:34 -07:00

server

T11.2: capture usage events (CR-019)

2026-09-23 11:24:49 -07:00

tests

T10.7 - a fake-OIDC-provider test seam, mirroring ldap_fake.py

2026-09-03 12:11:24 -07:00

.gitignore

Productionize WP Suite: auth, security hardening, sync, dashboard, PWA, email

2026-07-15 17:51:15 -07:00

CLAUDE.md

S13 - already fixed at T1.6; the records said otherwise, now corrected

2026-08-20 18:26:40 -07:00

DEPLOY-login-portal.md

Add Portainer deploy guide for the login portal

2026-06-29 14:52:27 -07:00

DEPLOY-runbook-2026-08-04.md

Move user administration to its own page; add Project Super User

2026-08-05 17:36:14 -07:00

DEPLOY-runbook-2026-09-03.md

T10.9: rollback-aware deploy runbook for the Okta cutover

2026-09-03 14:25:18 -07:00

DEPLOYMENT.md

T10.6 - deployment docs and env var reference describe Okta, not the never-shipped LDAP config

2026-09-03 13:47:48 -07:00

docker-compose.yml

T10.6 - deployment docs and env var reference describe Okta, not the never-shipped LDAP config

2026-09-03 13:47:48 -07:00

Dockerfile

Productionize WP Suite: auth, security hardening, sync, dashboard, PWA, email

2026-07-15 17:51:15 -07:00

IMPLEMENTATION.md

Wave 7 prep - record the Aug 18 decisions as D1-D10 and amend the waves

2026-08-18 13:29:58 -05:00

KNOWN-ISSUES.md

Decisions of 2026-08-20 (evening), recorded

2026-08-20 17:45:58 -07:00

nginx-wp-suite.conf

NGINX: set Cache-Control via a map, not a nested location, so security headers survive

2026-08-03 22:37:18 -07:00

ONBOARDING.md

Isolate SOP/WP data per project (namespaced localStorage)

2026-06-15 15:46:59 -07:00

Project-SDE-WP-Suite.code-workspace

Initial commit: WP Suite project files

2026-06-11 12:10:03 -07:00

UX-REVIEW-2026-08-14.md

Import the R2 implementation spec into the repo

2026-08-14 17:42:56 -05:00

Description

No description provided

11 MiB

Languages

Python 49.3%

JavaScript 32.6%

CSS 8.9%

HTML 8.7%

Shell 0.4%