Use immutable account IDs for authorization and credential ownership. Keep usernames as mutable login/display attributes, and retain deleted accounts under generated names while allowing their original names to be registered with fresh IDs. Apply the same separation to teams and SCIM resources. Bind OIDC subjects and group grants to explicit account/team IDs. Keep SCIM names as a projection of the authoritative account store, and preserve account IDs across password changes and htpasswd credential imports. Store account IDs in package ownership, tombstones, staged uploads, publication idempotency, and persistent principals. Keep registry package and version keys as natural namespace identities. Replace the experimental native auth format and SQL schema directly, without migrations or compatibility aliases. Update configuration, management APIs, bootstrap output, documentation, and registry fixtures. Preserve joined token-owner lookups and use bulk account projections.
35 lines
619 B
JSON
35 lines
619 B
JSON
{
|
|
"pnpr": [
|
|
"introduction",
|
|
"installation",
|
|
"quick-start",
|
|
"cli",
|
|
{
|
|
"type": "category",
|
|
"label": "Configuration",
|
|
"items": [
|
|
"configuration",
|
|
"storage",
|
|
"backup-and-restore",
|
|
"tls-and-reverse-proxy",
|
|
"cloudflare",
|
|
"webhooks",
|
|
"auth-backends",
|
|
"identity",
|
|
"oidc",
|
|
"scim"
|
|
]
|
|
},
|
|
"ecosystems",
|
|
"container-images",
|
|
"discovery",
|
|
"web-ui",
|
|
"install-acceleration",
|
|
"shared-side-effects-cache",
|
|
"compiler-cache",
|
|
"pipeline-runs",
|
|
"endpoints",
|
|
"license"
|
|
]
|
|
}
|