- Shipped
- lúc 11:58 15 tháng 11, 2026 UTC
- Author
- Kamo
- Commit
- d377fd0
Settings › Security › Identity & Sign-In gains a Connected Apps section (?section=apps, MANAGE_CONNECTED_APPS 719; the tab, settings registry page and area open on any of 717/718/719). - "Let Websites And Apps Sign In With <Org>": the provider switch (turning it off with apps connected asks first), the pinned sign-in address and discovery address with copy + Open, signing-key age + Rotate Keys Now, and Move To The New Address when the org now has its own domain (old address still served). - An app card per app: logo (via the image proxy) or the template's mark, On/Off, kind, Ask First / Pre-Approved, who may use it in words (departments/titles/teams by name, people, customers), people using it (activeGrantCount), last used (newest grant), what it can see, secret age; one split button: Edit, Setup Steps, People Using It (MemberChipById, revoke one), Rotate Secret (0 h–1 week overlap, new secret shown once + .env), Revoke All Sign-Ins, Disable/Turn Back On, Remove (typed confirm). First-timer card with the template marks. - Wizard: 1 quick-start template (WordPress, Grafana, Discourse, Moodle, Nextcloud, Mattermost, Zapier, Make, Custom Website, Single-Page App, Mobile App; Back-End Service shown as Coming Later — the server refuses MACHINE) → 2 name, logo, description → 3 return addresses checked live by SecurityService's own rules (site address builds the product's exact callback; Make's is fixed; sign-out addresses, back-channel logout, Basic/Post under More) → 4 seven plain-language permission switches (Sign-In always on) → 5 who may use it (Everyone / Some People via department, job title, team pickers + MemberPickerDialog; customers none/all/some) → 6 Ask First / Pre-Approve + private member number, with a live consent-card preview beside steps 2, 4, 6 → 7 client id, secret shown once (I've Saved It, .env download, leave confirm), the template's exact setup steps with values filled in, and Node / Python / PHP (+ browser) samples. - My Profile › Access: Apps With Access (selfOnly) — each approved app, what it can see in words, last used, Revoke. - Relays app/api/security/connected-apps (no-store) and my-app-grants; **************** (parsing + pure rules + guides/snippets/.env, 17 tests), connectedAppsApi.ts, connectedAppsHelp.ts; help mark on every control; help center articles connected-apps, connect-an-app, apps-with-access (published) + indexes; MotionConfig; brand colours.