identuum-ui v0.9.12

The static console export for identuum-idp-oss v0.9.12: a complete member
area, sign-in providers in Settings, truthful email status, and fewer false
error messages.

• The member Overview shows real facts. The four "Coming soon" cards are
  gone. Three cards — Profile, Security and Sessions — show your name and
  email, whether two-step sign-in is on and how many backup codes are left,
  and how many devices are signed in. Each card opens its page. A card that
  cannot load says so and still opens its page.
• The member menu has Profile, Security and Sessions next to Overview,
  on the Overview and on the account settings pages.
• The provider page keeps working when a tab stays open. When the
  access token has expired, the console renews it and reads the
  organization again. After a server restart, a failed first read is tried
  once more.
• Provider save and remove failures say what happened. When the
  organization cannot be read, the message says whether the server did not
  answer, you lack permission, or the organization could not be read; a
  save the server refuses gives the server's reason. Settings
  and the Add and Edit pages say the same when they cannot read the
  organization. A failed save keeps what you typed, except the client
  secret. An expired session goes to the sign-in page.
• A visitor who never signed in sees the plain sign-in page, in the
  exported console and in the Next deployment. "Your session has expired"
  is shown only when a sign-in that was presented is refused.
• The sign-in page shows "You have been signed out." once. It goes away
  after a sign-in attempt or a reload. "Sign-out could not be confirmed"
  (with Retry sign-out) and "signed out on this device only" stay until they
  are resolved.
• Clearer text: the password tab says this device stays signed in and
  your other devices are signed out; the two-step tab explains recovery
  codes; the application forms point to "Rotate client secret".
• Sign-in providers are listed in Settings. The new "Sign-in providers"
  card shows each provider's name, type, short identifier, status, email
  domains, last update and the redirect URI, with a Copy button. It also
  says in words how members sign in (password only, password or a
  provider, or a provider only), and adds a hint when that policy and the
  list do not match.
• Add and Edit return to Settings. After a save you are back on Settings
  with "Provider saved." or "Provider updated." and the redirect URI in the
  list. You no longer need to reload the page. Cancel goes back without a
  change.
• Remove asks first and stays on the page. "Remove…" opens a short
  question. After you confirm, the provider leaves the list and the card
  says "Provider removed." A provider another tab already removed leaves the
  list too. If removal fails, the provider stays, the card says so, and the
  keyboard focus moves to that message.
• An unknown sign-in policy is not shown as "password only". A server
  that does not report the policy shows "The sign-in policy could not be
  read."
• "Add provider" says why it is off. This edition supports one sign-in
  provider, so the button is disabled while one exists, with that reason
  next to it.
• The old provider page address opens Settings at the providers card,
  so old links still work.
• One backup code reads in the singular: "Only 1 backup code left."
• The member Overview says how your email address was verified. It
  shows "Verified by email", "Verified by your sign-in provider" or
  "Verified". When the address is not verified yet, "Send verification
  email" mails you a link, and the page says what happened. When this
  server cannot send email, the page says so and asks you to contact your
  administrator. Needs identuum-idp-oss v0.9.12; other servers show the
  previous Verified / Unverified row.
• An administrator sees how a user's address was checked. The user
  page shows, under the address, whether it was verified by email, by the
  sign-in provider or before v0.9.12, or why it is not verified (set by an
  administrator, activated with an administrator's link, or set during
  setup).
• Smaller fixes on the member Overview. "Send verification email" is a
  44 px button. The "Signed in as" card says "Two-step sign-in", like the
  Security card. When the server does not answer, the Security card says it
  could not load.