Skip to content

Platform - #111

Merged
CHINMAYVIVEK merged 10 commits into
devfrom
platform
Oct 2, 2026
Merged

CHINMAYVIVEK merged 10 commits into
devfrom
platform

Conversation

@ATRIwOX

@ATRIwOX ATRIwOX commented Oct 2, 2026

Copy link
Copy Markdown
Contributor

Summary

Merges platform into dev with P1 platform work for enterprise auth, mail/notifications, and the realtime bus, plus a fix so the right-hand Messages / Log activity dock shows on the home dashboard when company mail settings allow it.

  • SUM-PLAT-13 — OIDC/OAuth (PKCE, callback, JWKS id_token verification), optional TOTP login step and trusted device, provider and identity admin UI, enterprise login/setup shell with SSO buttons, self-service TOTP on account settings, login password-toggle fix, auth documentation.
  • SUM-PLAT-14 — Followers, message subtypes, in-app notification center (bell), HTML mail queue integration, mail addon wiring and tests.
  • SUM-PLAT-15 — Durable bus events, PostgreSQL NOTIFY fan-out, channel ACL, SWC bus reconnect/replay and server tests.
  • Shell UX — Home dashboard no longer sets SuppressActivityDock, so /web/home gets the same right activity column (Messages + Log) as other shell pages when chatter/activity panel is enabled on the company.

Test plan

  • Login: local credentials, SSO start/callback, rate limit/lockout; TOTP after password when enabled; trusted device when checked.
  • Admin: enable/disable auth providers; auth.local_enabled; read-only TOTP on user form; identity list.
  • Account: TOTP enroll (QR), confirm, disable from settings account.
  • Mail: chatter on mail-thread records; followers; bell notifications; mail queue/HTML where configured.
  • Bus: events after NOTIFY; ACL on subscribe; client reconnect.
  • Home: /web/home grid and list — right Messages/Log panel visible, resize/toggle; Log entries when enabled.
  • Regression: workspace forms with <chatter>; settings and apps pages load.
  • CI: cd sumeru && make on this branch.

Reviewer notes

  • Home dock was hidden because home_dashboard.go forced SuppressActivityDock; that is removed so base.html can render the activity dock when ActivityEnabled is true.
  • SPA navigation does not refresh server-rendered dock HTML; record chatter remains on form views when the view arch includes <chatter>.
  • If login branding (company login logo/tagline) or template folder reorg are still only local, commit and push before merge if they should be in this PR.

ATRIwOX added 10 commits October 2, 2026 20:29
Addon data must use the sumeru document root so generate and module load succeed.
Fewer web entrypoints; shared flash cookies and unified rate limiting without behavior regressions on public routes.
Persist bus events, publish on ORM hooks, and harden SWC listen/reconnect with channel-scoped delivery.
…l queue

Mail thread on models, follower-driven notifications, SWC bell, and outbound HTML mail via the worker.
…A step

Provider and identity models, OAuth callback with fail-closed JWT checks, TOTP/trusted-device cookies, and shared login completion path.
…lment

Settings menus for sys.auth.provider and linked identities; account security flow with QR confirm and admin read-only 2FA flag.
Split brand/sign-in layout, enabled IdP buttons, auth.local_enabled behavior, and aligned setup wizard styling.
Login HTML already uses sum-password-field; enhance toggles in place instead of skipping wrapped inputs.
CONTRIBUTING reflects JWKS verification, auth.local_enabled, and where admins configure IdPs.
@ATRIwOX
ATRIwOX requested a review from CHINMAYVIVEK October 2, 2026 15:38
@ATRIwOX ATRIwOX self-assigned this Oct 2, 2026
@ATRIwOX
ATRIwOX requested a review from a team October 2, 2026 15:38
@CHINMAYVIVEK
CHINMAYVIVEK merged commit 3fe7ca1 into dev Oct 2, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants