Files
Zoltan Kochan bbae0b99fe fix(pnpr): bind authorization to immutable account and team IDs (#17824)
Use immutable account IDs for authorization and credential ownership.
Keep usernames as mutable login/display attributes, and retain deleted
accounts under generated names while allowing their original names to
be registered with fresh IDs.

Apply the same separation to teams and SCIM resources. Bind OIDC subjects
and group grants to explicit account/team IDs. Keep SCIM names as a
projection of the authoritative account store, and preserve account IDs
across password changes and htpasswd credential imports.

Store account IDs in package ownership, tombstones, staged uploads,
publication idempotency, and persistent principals. Keep registry package
and version keys as natural namespace identities.

Replace the experimental native auth format and SQL schema directly,
without migrations or compatibility aliases. Update configuration,
management APIs, bootstrap output, documentation, and registry fixtures.
Preserve joined token-owner lookups and use bulk account projections.
2026-11-07 10:54:10 +01:00

35 lines
619 B
JSON

{
"pnpr": [
"introduction",
"installation",
"quick-start",
"cli",
{
"type": "category",
"label": "Configuration",
"items": [
"configuration",
"storage",
"backup-and-restore",
"tls-and-reverse-proxy",
"cloudflare",
"webhooks",
"auth-backends",
"identity",
"oidc",
"scim"
]
},
"ecosystems",
"container-images",
"discovery",
"web-ui",
"install-acceleration",
"shared-side-effects-cache",
"compiler-cache",
"pipeline-runs",
"endpoints",
"license"
]
}