veronicaandfred
a480ee83dc
ci/woodpecker/push/publish Pipeline was canceled
Co-authored-by: veronica <[email protected]>
26 lines
1.2 KiB
Markdown
26 lines
1.2 KiB
Markdown
---
|
|
kind: guide
|
|
status: active
|
|
---
|
|
|
|
# Security
|
|
|
|
> **Status:** Partially migrated. The SSO provider and Discord ingress security pages are current.
|
|
|
|
This chapter will contain authentication, authorization, SSO, secrets, RBAC, and security-control guidance for administrators.
|
|
|
|
## Planned pages
|
|
|
|
- [`sso-providers.md`](sso-providers.md) — current provider configuration, discovery, callbacks, and failure modes.
|
|
- [`discord-ingress.md`](discord-ingress.md) — current Discord service authentication, allowlists, bindings, roles, replay, and failure controls.
|
|
- `secrets.md` — document general secret handling after source/configuration verification.
|
|
- `rbac.md` — document roles and permissions from the canonical implementation.
|
|
|
|
The current SSO page reflects dynamic provider discovery. The Discord page documents only the verified Discord compatibility boundary; it does not claim Telegram or Matrix parity. Do not revive retired root documents or add frontend feature flags that the web flow does not consume.
|
|
|
|
## Related
|
|
|
|
- [`Administrator guide`](../README.md)
|
|
- [`API documentation`](../../API/README.md)
|
|
- [[DEVELOPER-GUIDE/architecture/README|Architecture index]]
|