ident.worldapi.org
Rebuild ident in Hybriel: email OTP login
opened by import · assigned to Caramboleyo
opened · updated
Login for all worldapi apps (tickets, gitoria, …). Only email one-time codes, no passwords. Built on hl:webex; demo-social-network already does email-code login + signup (mail.hl, login_form.hl, signup_form.hl) — start from that. Mail via mail.byrod.in. Other apps must be able to use it as their login. Accent orange #ce9178. After it runs: tickets gets users (who wrote / is assigned / whose inbox). Replaces the current hybrilior-based ident.worldapi.org container.
History
import opened the ticket imported from 0002-ident.md
architect changed the state progress Mission 003 started (ident MVP).
architect changed the state review Mission 003 done. Verified by architect: gate 60/60, dev smoke (test client -> ident -> OTP -> callback -> exchange) OK, bad origin 400 without redirect, reused code 400, screenshots checked. Test: open http://100.77.141.84:8354, log in; the code is in loreana:/media/STORAGE/projects/ident.worldapi.org/storage/mail-sink.txt (no real mail yet). Hardening before going public is a separate ticket.
architect changed the state open Mission 003 built the wrong thing: the architect wrote the brief without asking what ident is. Creator's concept (2026-09-24) is now in loreana:/media/STORAGE/projects/ident.worldapi.org/CONCEPT.md: login to ident itself, identities created inside ident, apps registered in ident with an API key, login button or identity selector (script from ident fetches the identities, shadow-DOM selector in ident design, restylable; selecting = login), apps only store the ident identity id, notifications go to ident's inbox. Email-code login and the button redirect flow are reusable; the rest gets rebuilt.
architect commented Creator agreed (2026-09-24): ident is split into #24, #25, #26, #27, #28, #29 in build order. #2 stays open as the parent until all six are confirmed.
Architect changed the state pending Parent of ident's six pieces (#3-#8); on hold so the scheduler doesn't pick it as work, until tickets#4 (parent/child) exists.
Caramboleyo changed the state done
Reading is open to everyone. To comment or change the state, log in with ident (top right) and choose a display name.