Jakub Zych 756a97c181 docs(19.4): decide OIDC on wristband with golang-jwt ...

- Extend the hand-written wristband with an OIDC flavour; reject zitadel/oidc v3 (D-06, D-09, D-14)
- golang-jwt/jwt/v5 v5.3.1 signs id_tokens; JWKs encoded with the standard library
- go-oidc v3.21.0 and x/oauth2 v0.37.0 test-only in sm-oauthserver-plugin
- STACK.md zitadel/oidc row marked superseded

2026-10-19 18:06:54 +02:00

..

2026-10-07-embedded-admin-release-gate.md

docs(planning): record embedded admin release gate

2026-10-07 10:39:22 +02:00

2026-10-11-framework-html-sanitizer-bluemonday.md

docs(17-01): decision note naming bluemonday v1.0.27 for the framework sanitizer

2026-10-12 15:09:52 +02:00

2026-10-12-admin-display-sanitizer-dompurify.md

docs(quick-261012-s3g): decision note naming DOMPurify and Vitest browser mode for the admin

2026-10-12 20:31:34 +02:00

2026-10-13-paymentgateway-hashids-go-hashids.md

docs(18-02): decision note for the go-hashids dependency

2026-10-13 12:10:41 +02:00

2026-10-15-cooler-go-redis-otter.md

docs(19.3): decide cooler dependencies

2026-10-15 17:27:33 +02:00

2026-10-15-release-v0-2-0.md

docs: decide to release the 19.3 gap closure as v0.2.0

2026-10-15 23:14:08 +02:00

2026-10-17-generic-mcp-module.md

docs: capture exploration — generic MCP module (phase 19.7, note, two prerequisite todos)

2026-10-17 20:31:25 +02:00

2026-10-18-bluemonday-forum-policy.md

docs(19.1-02): add forum bluemonday policy note

2026-10-18 13:24:18 +02:00

2026-10-18-livekit-server-sdk-go.md

docs(19.1-05): record livekit/server-sdk-go/v2 v2.19.0 before import

2026-10-18 13:52:27 +02:00

2026-10-18-roadmap-reorder-demo-release-wavepath.md

docs(roadmap): reorder — demo at 20, Płytarium cutover 20→30, chat polish 19.2→31

2026-10-18 23:16:08 +02:00

2026-10-18-webpush-go.md

docs(19.1-04): record webpush-go v1.4.0 for Herald before import

2026-10-18 13:38:06 +02:00

2026-10-19-oidc-on-wristband-golang-jwt.md

docs(19.4): decide OIDC on wristband with golang-jwt

2026-10-19 18:06:54 +02:00

apparatus-dissolved-into-framework.md

docs: capture exploration — apparatus dissolved into framework

2026-09-28 00:39:43 +02:00

core-plugin-port-inventory.md

docs(roadmap): reorder — demo at 20, Płytarium cutover 20→30, chat polish 19.2→31

2026-10-18 23:16:08 +02:00

core-plugins-own-repos.md

docs: move golem15.user to sm-user-plugin and supersede the Phase 1 extraction deferral

2026-10-02 11:02:07 +02:00

go-vs-php-on-plytarium.md

docs: capture exploration — backend-deployment

2026-09-28 01:27:19 +02:00

journal-html-sanitizing-bluemonday.md

docs(16.2): record the editor-output policy extension

2026-10-10 12:11:30 +02:00

lagoon-per-query-collation.md

docs(quick-261001-ddh): record per-query collation decision superseding D-06

2026-10-01 09:53:57 +02:00

oauth2-wristband-direct-port.md

docs(08): create OAuth authorization server plans

2026-09-23 13:38:58 +02:00

plugin-layout-winter-directories.md

docs(05-01): confirm models-leaf rule against three more plugins

2026-09-18 18:37:26 +02:00

v1-target-plytarium.md

Initial commit: SummerCMS Go planning docs and research

2026-09-16 02:07:04 +02:00

wavepath-framework-asks-division.md

docs(roadmap): reorder — demo at 20, Płytarium cutover 20→30, chat polish 19.2→31

2026-10-18 23:16:08 +02:00

why-go-not-scala.md

Initial commit: SummerCMS Go planning docs and research

2026-09-16 02:07:04 +02:00