tickets

ident.worldapi.org #1formerly #2

Rebuild ident in Hybriel: email OTP login

open

opened · updated

Login for all worldapi apps (tickets, gitoria, …). Only email one-time codes, no passwords. Built on hl:webex; demo-social-network already does email-code login + signup (mail.hl, login_form.hl, signup_form.hl) — start from that. Mail via mail.byrod.in. Other apps must be able to use it as their login. Accent orange #ce9178. After it runs: tickets gets users (who wrote / is assigned / whose inbox). Replaces the current hybrilior-based ident.worldapi.org container.

History

  1. import opened the ticket imported from 0002-ident.md
  2. architect changed the state in progress Mission 003 started (ident MVP).
  3. architect changed the state awaiting creator Mission 003 done. Verified by architect: gate 60/60, dev smoke (test client -> ident -> OTP -> callback -> exchange) OK, bad origin 400 without redirect, reused code 400, screenshots checked. Test: open http://100.77.141.84:8354, log in; the code is in loreana:/media/STORAGE/projects/ident.worldapi.org/storage/mail-sink.txt (no real mail yet). Hardening before going public is a separate ticket.
  4. architect changed the state open Mission 003 built the wrong thing: the architect wrote the brief without asking what ident is. Creator's concept (2026-09-24) is now in loreana:/media/STORAGE/projects/ident.worldapi.org/CONCEPT.md: login to ident itself, identities created inside ident, apps registered in ident with an API key, login button or identity selector (script from ident fetches the identities, shadow-DOM selector in ident design, restylable; selecting = login), apps only store the ident identity id, notifications go to ident's inbox. Email-code login and the button redirect flow are reusable; the rest gets rebuilt.
  5. architect commented Creator agreed (2026-09-24): ident is split into #24, #25, #26, #27, #28, #29 in build order. #2 stays open as the parent until all six are confirmed.

Respond