feat(dashboard): add verified org domains UI#707
Merged
Conversation
Only missing piece of the Enterprise SSO story — backend for per-org verified email domains (home-realm discovery) had zero dashboard UI. - OrgDomains component: list, DNS-TXT challenge flow, super-admin trusted-assert quick add, delete-with-confirm - retryable "not verified yet" path keeps the challenge dialog and TXT record on screen for DNS-propagation retries - mount on org detail page beside the other SSO cards
…rgDomains Found in a critical re-review: the domain-input label had no htmlFor/id (same WCAG 3.3.2 gap fixed elsewhere this session), the initial fetch had no loading state (flashed "No verified domains yet." before real data arrived), and the list query didn't pass a pagination limit so more than the backend's default of 10 domains would be silently truncated with no indication.
3 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
The backend fully implements per-org verified email domains for home-realm
discovery (DNS TXT challenge/verify, super-admin trusted-assert, list,
delete) but had zero dashboard UI — the only piece of the Enterprise SSO
story an admin couldn't configure without calling the GraphQL API directly.
What
New
OrgDomainscard (structural clone ofSAMLServiceProviders.tsx),mounted on the organization detail page:
with copy-to-clipboard → Verify. A DNS-not-propagated-yet response keeps the
dialog and record on screen with a retry hint instead of discarding the flow
no client-side role gating invented (none exists elsewhere in this
dashboard); a non-super-admin caller gets the backend's real permission
error via the existing toast path
Test plan
path, retryable DNS-failure keeps dialog+record, delete-with-confirm
tsc --noEmitclean, prettier clean