cesnimda/jobtrackingapp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(auth): migrate account security presentation

Browse Source
This commit is contained in:
cesnimda
2026-10-11 21:16:05 +02:00
parent 8ad720da5d
commit ad7b4196af
22 changed files with 35532 additions and 143 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/redesign/phase-7/PRESERVATION.md
+27
View File
@@ -72,6 +72,33 @@ The migration-owner column assigns the approved slice while retaining completed
## Route and acceptance invariants
### P7-01 public scoped evidence, no full-group upgrade
[Public source/runtime results](p7-01/evidence/public-auth-results.json) and [acceptance/limitations](p7-01/README.md#public-authentication-implementation-and-acceptance) are pushed in8ad720d; immediate localHEAD=origin=live development equality was verified2026-10-11 18:50:24UTC, main unchanged. All57 statuses remain0 PASS/56 PARTIAL/0 FAIL/1 DEFERRED. At that public gate the account/private-tree migration was a separate in-flight boundary; its later finite result is recorded below.
| Protected groups | Fresh finite public evidence | Remaining mandatory boundary |
|---|---|---|
| E02 | Retained33 Login tests; real registration/verification/reset/replay and old-password denial through the application Identity + loopback SMTP path; invalid/missing link and no-write local validation; remember-me/return semantics retained | Actual production mail, Turnstile, authenticator/provider/human and broader expiry/rate-limit combinations; local SMTP is not external delivery acceptance |
| E03 | Shared real provider sign-in consumers remain covered by Login tests; relink retry returns to the configured public policy; no provider call or protocol change | Actual grants, origin/popups/cancellation/provider account-link acceptance; finite account-card proof is below; actual provider grant/popups remain unqualified and mailbox grants remain separate |
| E05/E09 | Real password reset invalidates the earlier authenticated session; failed sign-in retains draft and exact protected return before explicit successful retry | Finite account session/revoke/cancel/modal/private-disposal proof is below; broader account switching/BFCache/offline/old-bundle/deployed cases still require evidence |
| E06 | Missing/invalid email-change confirmation remains named, recoverable and owner-command bound; real password recovery readback is passing | Finite identity-only save/canonical/sibling and retained-password recovery proof is below; complete email-change success/cancel and avatar crop/remove qualification remains |
| E08 | EN/NB/light/dark finite public frames, named main/H1, labelled errors/focus/status/reflow;22 all-enabled scans0 violation nodes and31 retained contrast incomplete nodes | Full cross-product, actual spoken state/name/error and contrast/forced-color/zoom/physical keyboard/device proof; existing server-authored English errors retained explicitly |
The22 public native cases and two isolated recovery cases are new separate packs; affected61 unit cases contain38 inherited cases plus23 additions. They are not summed as new full-suite evidence. Public product/pricing E01, shell navigation E07 and account setup E04 are not declared migrated or complete by this public result.
### P7-01 account scoped evidence, no full-group upgrade
[Account working-tree results](p7-01/evidence/account-results.json) and [account report](p7-01/README.md#account-identity-and-security-implementation) record fresh573/89 full frontend, account6/public22/auth-boundaries10 and types/lint/build pass. Actual eight-image/context review establishes implemented account scope CONDITIONAL GO; final finite hygiene and normal account push/receipt remain pending. All57 statuses and32 whole-route qualifications remain unchanged.
| Protected groups | Fresh finite account evidence | Remaining mandatory boundary |
|---|---|---|
| E02/E03/E06/E09 | Real default Google/Microsoft account consumers retain current-password/no-exchange/cancel/error/retry/unlink/forced-sign-in safeguards; explicit UI-locale dates. Actual identity PUT204/reload sends only four identity fields and keeps separate email/password/provider owners | Actual provider popup/grant/reconnect/real delivery and full avatar/email-change/device/human combinations remain qualified |
| C01/C07 | Four native identity samples read canonical Career data and two sibling CVs before/after save/reload and assert no canonical/CV browser write. Stored-text status is labelled truthfully without a CV-library fetch | Full Career save/import/history/concurrency and CV overrides/render/frozen/PDF acceptance remain their own migrations and integrated gate |
| E04/E08 | Unknown/failed2FA status is read-only until explicit status retry; known enabled/disabled/recovery/trusted-device cases retain ordinary unit assertions. Named H2 sections and eight finite geometry/axe contexts are retained | Real authenticator/device/reader/zoom and contextual contrast/focus qualification; account8 scans retain0 violation nodes/85 incompletes |
| E05/E08/E09 | Real multiple-login sessions prove canceled confirmation/no write, modal-local failed revoke, keyboard trap/cancel restoration, deliberate retry/readback/other-session401 and current logout/private-tree disposal; existing10 auth/isolation browser boundaries pass | Deployed BFCache/offline/old-bundle and full real-device/assistive combinations; no security protocol or whole-group acceptance inferred |
Full frontend521→573 adds52 cases across four new suites with no removed/renamed cases: public23 and account29 (providers12, card presentation7, flows5, Profile5). Focused subsets and native packs overlap and are not added to that total. Earlier571 frontend and pre-copy native runs remain historical; the exact post-copy build/source identity is in the account manifest. P2-D01/sidecar/backend/rendering execution remains inherited here.
[INVENTORY.md](p7-00/INVENTORY.md#current-route-coverage) reconciles exactly32 current App patterns against [route acceptance](../phase-5/p5-15/ROUTE_ACCEPTANCE.md); all whole-route groups remain PARTIAL. Preserve Board/Application/mail aliases and actual query/hash/state behavior, section/sub precedence, safe internal from, numeric navigation-helper output, capture consumption, focusJobId and provider/token destinations. No Documents/Notifications/aggregate Admin/new Career destination is inferred without contract/content evidence.
P2-D01 remains the ordinary passing [frozen-workspace test](../../../job-tracker-ui/e2e/redesign-preservation.spec.ts#L73), retaining native capture/readback/archive bytes/canonical/sibling proof. No skip, expected-failure marker or relaxed oracle may replace it. Preserve server roles/account/tenant/owned-resource denial; canonical Career versus CV overrides; revision/conflict/recoverable drafts; private/public PDF admission/revocation; unchanged physical pagination; immutable packages; existing grounding/proposal/stale guards and Production C11 withholding.