Bundled Pocket ID for users with no OIDC provider, design (Q203, Vikunja #458) #1760

Open
opened 2026-10-21 20:21:47 +00:00 by jarvis · 0 comments
Contributor

Design row for Vikunja #458 (DECISIONS Q203, Mos order mos-1202). Brief: docs/plans/2026-10-21_bundled-pocket-id.md (7d08237e1).

Jason, verbatim: "Let's use O6. If a user does not have an OIDC provider to configure, we will need to use a bundled Pocket ID instances to handle this traffic."

Owner Launchpad, reviewer Webby, gate owner Sage. After row 252. Design only: DESIGN.md settles the installer choice, the component under REQ-INST-1, the Q175 start checks against the bundled instance (discovery, PKCE S256, asymmetric algorithms only), the client secret slot, passkey enrollment, reach, and the build rows. dragon-lin keeps Authentik; outside the 10-27 MVP.

Design row for Vikunja #458 (DECISIONS Q203, Mos order mos-1202). Brief: docs/plans/2026-10-21_bundled-pocket-id.md (7d08237e1). Jason, verbatim: "Let's use O6. If a user does not have an OIDC provider to configure, we will need to use a bundled Pocket ID instances to handle this traffic." Owner Launchpad, reviewer Webby, gate owner Sage. After row 252. Design only: DESIGN.md settles the installer choice, the component under REQ-INST-1, the Q175 start checks against the bundled instance (discovery, PKCE S256, asymmetric algorithms only), the client secret slot, passkey enrollment, reach, and the build rows. dragon-lin keeps Authentik; outside the 10-27 MVP.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#1760