- Shipped
- November 15, 2026 at 12:59 AM UTC
- Author
- Kamo
- Commit
- 10c1120
CONTRACT §1a/§1b/§1c/§1f. Package com.kamo.z.shared.identity: UserIdentity (user_identities, UNIQUE issuer+subject+connection_key), OrgSignInPolicy (org_signin_policies, no row = defaultsFor), UserPasskey (user_passkeys, UNIQUE credential_id); STRING enums IdentityKind, FederatedProvider, IdentityLinkMethod, MfaRequirement; repos in identity.repos (consumers add it to @EnableJpaRepositories). Tables were hand-applied as kamo before this push; TIMESTAMPTZ columns map Instant, DB-stamped. AccessLogEventType: 13 values appended (OAUTH_CONSENT_GRANTED already existed and is reused). PlatformOAuthProviderType: GOOGLE_SIGNIN..GITHUB_SIGNIN (25-30) + isSignIn(); the platform page renders cards from its own list, so nothing appears until ID1.6. RoleRightType: 717 MANAGE_SIGN_IN_METHODS, 718 MANAGE_IDENTITY_PROVIDERS, 719 MANAGE_CONNECTED_APPS (ServiceType null like MANAGE_ACCESS_RULES, standalone roots); RoleRightHierarchyTest 463/302/51/110, roots 161. Also fixes AccessLogEventTypeTest's vault anchor (the LEAD_SSN_* pair sits before it).