golem15/summercms
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(07): revise plans after checker review

Browse Source
This commit is contained in:
Jakub Zych
2026-09-22 12:37:08 +02:00
parent 57745e32a2
commit 3aed5c88c3
6 changed files with 65 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
.planning/phases/07-user-plugin-and-authentication/07-01-PLAN.md
View File

@@ -37,6 +37,7 @@ must_haves:
- "bouncer.Principal carries PreferredLocale and TokensValidAfter so I18N-02 and D-20 have a place to attach without a second DB round-trip"
- "surf's post-auth locale stage overrides towel locale from Principal.PreferredLocale only when non-empty, and only after an auth guard has resolved a Principal (C-01, I18N-02)"
- "lagoon.Validate accepts email, confirmed, different:field and mimes:list tokens the user plugin's register/update/change-password/avatar rules need (Pitfall 6)"
- "bouncer.HashPassword defaults to bcrypt cost 10 (config-driven), a real PHP $2y$ hash verifies unchanged via CheckPassword, and NeedsRehash flags a hash whose cost is lower than configured for silent rehash on login, per D-19"
artifacts:
- path: "bouncer/mint.go"
provides: "Mint(secret, sub, issuerURL string, ttl time.Duration) (token, jti string, err error) with the hardcoded prv constant"