bb-plane-fork/apps/api/plane/authentication
binarybeach 69b499c9ec binarybeachio: trusted view — key User on bb_mailbox (four-layer identity model)
Identity-model rollout T2.4. Trusted view now derives `lookup_email = bb_mailbox or email`
and uses it for both User.objects.filter() and the new-User row's email field. WARN-log
fallback to federation email when the claim is absent (transitional safety; should never
fire once Zitadel `bb-claims` Action + bridge-side userinfo enrichment are live).

Decode-time required-claims unchanged (`bb_mailbox` stays optional) so partial deploys
aren't bricked. Pre-migration SQL rename of operator's existing User row required —
see binarybeachio docs/services/plane/migration-plan.md §9.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 00:56:35 -10:00
..
adapter binarybeachio: Bucket-4 trusted-JWT auth — replaces in-place github.py patch 2026-05-03 20:24:48 -10:00
middleware chore: add copyright (#8584) 2026-01-27 13:54:22 +05:30
provider binarybeachio: Bucket-4 trusted-JWT auth — replaces in-place github.py patch 2026-05-03 20:24:48 -10:00
utils chore: add copyright (#8584) 2026-01-27 13:54:22 +05:30
views binarybeachio: trusted view — key User on bb_mailbox (four-layer identity model) 2026-05-05 00:56:35 -10:00
__init__.py chore: add copyright (#8584) 2026-01-27 13:54:22 +05:30
apps.py chore: add copyright (#8584) 2026-01-27 13:54:22 +05:30
rate_limit.py chore: add copyright (#8584) 2026-01-27 13:54:22 +05:30
session.py chore: add copyright (#8584) 2026-01-27 13:54:22 +05:30
urls.py binarybeachio: Bucket-4 trusted-JWT auth — replaces in-place github.py patch 2026-05-03 20:24:48 -10:00