Skip to content

Release: PLAT-13–15 auth, mail, bus, login branding, and home activity panel - #113

Merged
ATRIwOX merged 16 commits into
mainfrom
dev
Oct 2, 2026
Merged

ATRIwOX merged 16 commits into
mainfrom
dev

Conversation

@ATRIwOX

@ATRIwOX ATRIwOX commented Oct 2, 2026

Copy link
Copy Markdown
Contributor

Summary

Merges dev into main for the Sumeru kernel. Delivers P1 platform auth, mail, and realtime bus, shell fixes, and login/template improvements since the last dev → main merge (PR #110).

What’s included

Area Highlights
SUM-PLAT-13 OIDC/OAuth (PKCE, JWKS), TOTP step + trusted device, provider/identity admin UI, enterprise login/setup, account TOTP self-service, password toggle on login
SUM-PLAT-14 Followers, subtypes, notification bell, HTML mail queue
SUM-PLAT-15 Durable bus events, PG NOTIFY, channel ACL, SWC reconnect
Shell Home dashboard shows right Messages / Log dock when company mail flags allow (removed SuppressActivityDock)
Login UX Tenant branding: company login_logo / login_tagline, /web/login/logo, default Sumeru SVG; templates under shell/, auth/, pages/, portal/, partials/ + templates_paths.go
Other Flash/API key/rate-limit consolidation; mail subtype XML fix; auth/bus/mail docs

Test plan

  • Sign-in: local, SSO, TOTP; providers and account TOTP settings
  • Mail/chatter + bell; bus events and ACL
  • /web/home activity panel; /web/login branding (default + company logo)
  • Core pages load after template move (home, apps, settings, setup)
  • cd sumeru && make

Deploy notes

  • Run DB sync / module update so new core.company fields and mail/bus schema apply.
  • Optional: logo_path / company_display_name in sumeru.conf; company Login branding in UI.

ATRIwOX and others added 16 commits October 2, 2026 20:29
Addon data must use the sumeru document root so generate and module load succeed.
Fewer web entrypoints; shared flash cookies and unified rate limiting without behavior regressions on public routes.
Persist bus events, publish on ORM hooks, and harden SWC listen/reconnect with channel-scoped delivery.
…l queue

Mail thread on models, follower-driven notifications, SWC bell, and outbound HTML mail via the worker.
…A step

Provider and identity models, OAuth callback with fail-closed JWT checks, TOTP/trusted-device cookies, and shared login completion path.
…lment

Settings menus for sys.auth.provider and linked identities; account security flow with QR confirm and admin read-only 2FA flag.
Split brand/sign-in layout, enabled IdP buttons, auth.local_enabled behavior, and aligned setup wizard styling.
Login HTML already uses sum-password-field; enhance toggles in place instead of skipping wrapped inputs.
CONTRIBUTING reflects JWKS verification, auth.local_enabled, and where admins configure IdPs.
Add TemplatePath and parse-set helpers (shell layout, shell inner pages,
auth pages) so handlers stop hardcoding filenames under templates/.
…ortal, partials

Move base.html to shell/, auth pages to auth/, portal pages to portal/,
and shell inner bodies to pages/ (drop *_inner suffix). Split shared
defines into partials (menu icons, home hub, apps module forms, auth
assets, login brand aside). Wire RenderPage, shell inner render, auth
template cache, setup, and portal handlers via render/templates_paths.go.
… mark

Add core.company login_logo and login_tagline with form fields. Resolve
sign-in panel branding: company upload via public GET /web/login/logo,
then logo_path in config, then bundled sumeru-logo.svg. Modern left-panel
CSS with accent classes from company color index. Document host-level
logo_path and company_display_name in sumeru.conf.example.
Export build-brand and logo-route helpers for tests. Add logo priority
and data-URL parsing tests. Extend login GET test for brand lockup and
default SVG. Reset auth template cache when TemplatesPath changes in tests.
Login tenant branding and engine template reorganization
@ATRIwOX
ATRIwOX requested a review from CHINMAYVIVEK October 2, 2026 16:07
@ATRIwOX ATRIwOX self-assigned this Oct 2, 2026
@ATRIwOX
ATRIwOX merged commit 07b3b3d into main Oct 2, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants