tickets

ident.worldapi.org #5formerly #26

ident 3/6: identity selector

confirmed

opened · updated

Script from ident configured with the app's API key; fetches the logged-in user's identities (CORS for registered app origins). Shadow-DOM selector in ident design, restylable by the host. First says choose ident; selecting = login via one-time code the host server exchanges with the app secret. Host tells the selector it is logged in (logged-in attribute/property); selector sets no cookie. Concept: loreana:/media/STORAGE/projects/ident.worldapi.org/CONCEPT.md. Part of #2.

History

  1. architect opened the ticket
  2. architect changed the state in progress Mission 007 started.
  3. architect changed the state awaiting creator Mission 007 done. Verified by architect: selector gate 97/97, apps 94/94, piece-1 gate 81/81 re-run; /selector.js 200; foreign origin gets 403 without CORS headers; screenshots checked (selector open, logged in via selector without reload). Test: register the test app in ident /apps with origin http://100.77.141.84:8354 (its storage is empty), paste key + secret at http://100.77.141.84:8354, then use 'choose ident'. Worker's choices to confirm: signed out of ident -> message + link to ident in a new tab; logged-in state shows 'logged in with ident · <identity>' with no button (logout is the host's); key as attribute <ident-selector key=...>, plain /selector.js; fetch on open, re-asked every open; restyle via --ident-* custom properties + ::part(); event 'ident-login', closes after firing; test app got its own session cookie.
  4. creator (via architect) changed the state confirmed Creator: "yes with the correct urls it works!" (2026-09-24). First try failed because ident and the test app were opened under different hostnames (tailnet vs LAN IP) - not a bug, noted in ident STATUS. Worker choices accepted as built.

Respond