Add the Quick Connect round trip to the manual E2E gate [#1114]
The manual E2E checklist covered federation, deployment topology and the
browser dashboard, and nothing in it exercised a native client. The plugin
implements no Quick Connect itself, so the capability that answers "SSO
plugins are web-UI only" was verified nowhere: the in-repo harness drives a
headless browser against the plugin's own endpoints and cannot reach a
native client, and no manual item asked anyone to try.
Adds a Native clients sub-section under section 6 with one item per protocol,
each carrying the reason it stays manual, and requires the client app and
version to be recorded so a later run is reproducible. A client that cannot
complete the round trip is a recorded result, not a blank box. The
behavioural description stays on the Login Flow page and is linked rather
than restated.
Replace the typographic dashes on every page
612 dashes across 22 of the 30 pages. No page ends a line with a
space afterwards, and 566 dashes that would have started a Markdown list are
escaped so the list does not appear.
A wiki has no pull request and no gate, so the counts before and after are the
evidence: the run is recorded in iderex/operations#861.
Part of the fleet-wide pass in iderex/operations#860.
Signed-off-by: Nils Lehnen <30603423+iderex@users.noreply.github.com>
Fix Home + de-link the pages that moved to internal docs
The five process pages that moved to the local docs/ (Roadmap, Threat-Model,
Delivery-Metrics, Security-and-Maturity-Self-Assessment, Native-OIDC-Coexistence)
are wiki stubs now, but Home and several public pages still linked them. Clean
Home's page list, de-link the internal pages from Installation, Migrating-from-9p4,
Releasing, and Security-Model (keeping the surrounding text and the maturity-ladder
wording inline), point Home at the public Comparison page for the native-OIDC
stance, and fix Home's install wording (adding the plugin's own repository, not the
built-in catalog).
Refs #822 #987
Move five process pages to local docs; first-person voice
Delivery-Metrics, Native-OIDC-Coexistence, Roadmap,
Security-and-Maturity-Self-Assessment, and Threat-Model now live in the
project's internal docs/ (kept locally, not published); each wiki page is
reduced to a short "moved, now internal" stub for URL stability, and the
sidebar drops them. Also fix a third-person "the maintainer" translation
artifact (it means me, the sole author) in Releasing, Review-Gate, and
Security-Conformance.
Refs #987
Add Dex and Zitadel provider guides; document the beta-only channel (#932, #937, #954, #956)
Provider Setup gains Zitadel (object-map role claim urn:zitadel:iam:org:project:roles
with RoleClaimIsObjectMap, projectRoleAssertion + idTokenRoleAssertion both required,
role grants per user) and Dex (login round-trip; the built-in password database carries
no groups, so RBAC needs an upstream connector; no preferred_username - the username
comes from the name claim). Both recipes mirror the plugin's automated end-to-end
harnesses, so every setting is verified nightly.
Beta-only sweep (#954/#956): Installation and Migrating-from-9p4 point at the beta
repository URL only (the stable manifest is emptied until the first stable release);
Releasing and Rollback carry a status note and describe the JF12 leg publishing from
main (the 4.2 branch is retired); the catalog name is Community SSO for Jellyfin.
Consolidate the wiki: canonical Coding Standards, merged Architecture, split Provider Setup
Restructure the wiki into one coherent, audience-grouped set with a single home
for each fact.
- New Coding-Standards page: the one canonical statement of the architecture,
comment/documentation (#864), and object-oriented rules; the repo's CLAUDE.md
and CONTRIBUTING.md now point here instead of restating them.
- Merged the two stale, mutually-overlapping Architecture pages into one, re-based
on the current module-DAG reality (the old pages claimed the module split was
"not pursued" and that no IPluginServiceRegistrator existed — both were wrong
and contradicted docs/ARCHITECTURE.md). Cites modules and types, never
file:line, so it cannot drift on a move again.
- Split Provider-Setup (1172 lines, ~73% not provider-specific) into Provider
Setup (recipes) + a new Hardening & Options Reference; folded the security-
control narrative into the Security Model. Every moved section left a pointer.
- Merged Release-Policy + Release-QA-Checklist into Releasing (renamed the
per-release ladder to "release promotion ladder" to end the Beta-rung name
collision); merged OpenSSF-Best-Practices + Maturity-Map into Security &
Maturity Self-Assessment. Old slugs kept as redirect stubs.
- Rebuilt the sidebar into four audience groups (Getting started / How it works /
Security / Standards & process). Fixed the broken anchors, corrected the beta
publish-trigger to the daily scheduler (it is not "every merge"), de-referenced
the design records to module/type names, and trimmed Home's README duplication.