Matt Mabrey df20b8f18d wave-10: close out claim mapping and redirect URI, live in production ...

Confirmed by an actual live Okta sign-in after main (cc64c88) deployed: preferred_username is the right identity claim, and the redirect URI works. Matt matched his existing pre-Okta admin account rather than getting JIT-provisioned as a duplicate. Two deploy-time snags recorded, both Case B (config, not data): OKTA_CLIENT_ID/SECRET/ISSUER left empty in Portainer at first (caught cleanly by is_configured()), then OKTA_ISSUER missing its https:// scheme (surfaced as httpx.UnsupportedProtocol, not a deliberate app error - BL-028 still stands). Neither needed the backup. BTG pilot group now includes Cody and Cameron, awaiting Adrian.

2026-09-09 13:34:32 -07:00

backups

Productionize WP Suite: auth, security hardening, sync, dashboard, PWA, email

2026-07-15 17:51:15 -07:00

docs

wave-10: close out claim mapping and redirect URI, live in production

2026-09-09 13:34:32 -07:00

html

T10.5: login becomes an Okta redirect, not a form

2026-09-03 11:27:26 -07:00

nginx

NGINX: set Cache-Control via a map, not a nested location, so security headers survive

2026-08-03 22:37:18 -07:00

scripts

Add entrypoint fallback for missing bind-mounted scripts

2026-08-04 18:44:34 -07:00

server

T10.10: audit manage_users.py promote

2026-09-03 16:27:13 -07:00

tests

T10.7 - a fake-OIDC-provider test seam, mirroring ldap_fake.py

2026-09-03 12:11:24 -07:00

.gitignore

Productionize WP Suite: auth, security hardening, sync, dashboard, PWA, email

2026-07-15 17:51:15 -07:00

CLAUDE.md

S13 - already fixed at T1.6; the records said otherwise, now corrected

2026-08-20 18:26:40 -07:00

DEPLOY-login-portal.md

Add Portainer deploy guide for the login portal

2026-06-29 14:52:27 -07:00

DEPLOY-runbook-2026-08-04.md

Move user administration to its own page; add Project Super User

2026-08-05 17:36:14 -07:00

DEPLOY-runbook-2026-09-03.md

T10.9: rollback-aware deploy runbook for the Okta cutover

2026-09-03 14:25:18 -07:00

DEPLOYMENT.md

T10.6 - deployment docs and env var reference describe Okta, not the never-shipped LDAP config

2026-09-03 13:47:48 -07:00

docker-compose.yml

T10.6 - deployment docs and env var reference describe Okta, not the never-shipped LDAP config

2026-09-03 13:47:48 -07:00

Dockerfile

Productionize WP Suite: auth, security hardening, sync, dashboard, PWA, email

2026-07-15 17:51:15 -07:00

IMPLEMENTATION.md

Wave 7 prep - record the Aug 18 decisions as D1-D10 and amend the waves

2026-08-18 13:29:58 -05:00

KNOWN-ISSUES.md

Decisions of 2026-08-20 (evening), recorded

2026-08-20 17:45:58 -07:00

nginx-wp-suite.conf

NGINX: set Cache-Control via a map, not a nested location, so security headers survive

2026-08-03 22:37:18 -07:00

ONBOARDING.md

Isolate SOP/WP data per project (namespaced localStorage)

2026-06-15 15:46:59 -07:00

Project-SDE-WP-Suite.code-workspace

Initial commit: WP Suite project files

2026-06-11 12:10:03 -07:00

UX-REVIEW-2026-08-14.md

Import the R2 implementation spec into the repo

2026-08-14 17:42:56 -05:00

Description

No description provided

8.9 MiB

Languages

Python 49.3%

JavaScript 32.6%

CSS 8.9%

HTML 8.7%

Shell 0.4%