Promote v0.1.64 to main #117

Merged

binjovi-bot merged 1 commit from trunk into main 2026-09-13 12:42:51 +00:00

Conversation 0 Commits 1 Files changed 4 +320

binjovi-bot commented 2026-09-13 12:42:50 +00:00

Collaborator

Copy link

No description provided.

binjovi-bot added 1 commit 2026-09-13 12:42:50 +00:00

feat(binjovi): route the staging dashboard on binjovi.dev through Oathkeeper ... 540fc9884b

The staging dashboard answers 401 to every browser. Kratos pins its session
cookie to sean.farm, so a browser on binjovi.dev never carries a session.

Every browser rule on binjovi.sean.farm gains a twin on binjovi.dev. Each
twin asks the login proxy on that host for the session, mints the identity
token the app already verifies with the email from the proxy's user info,
and sends an HTML request with no session to the proxy's sign-in. A request
that is not HTML keeps its 401, which the availability gate expects. A
ReferenceGrant lets the route in binjovi-staging reach the Oathkeeper
Service.

A contract proves each twin carries the production route and methods, the
proxy's user info, the claims template, the redirect, and the staging
upstream, and that no staging rule reaches the production app.

Claude-Session: https://claude.ai/code/session_01XdBRc9CHgFhAxCyHbdVtt6

binjovi-bot merged commit 540fc9884b into main 2026-09-13 12:42:51 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/ory!117

No description provided.