- New untenanted Identity and Membership models
- New `identity_token` cookie with path "/" holds state across tenants
We're not sure whether the untenanted database will be sqlite or
MySQL, and so I've been careful to minimize
- database reads, placing them behind etags and caching
- database writes, only writing when a new Session is created (login)
Note that we track two things in the identity_token cookie: a signed
id, and the updated_at for the underlying Identity object. This allows
us to effectively cache on the Identity without having to hit the
database, by using an Identity::Mock object that is compatible with
etag and cache methods.
The new integration test shows the desired user-facing behavior, which
is to make it easy to login without a tenanted URL and to jump between
tenants.
- the untenanted "login_help" page shows all linked memberships
- the jump menu shows all linked memberships (except the current)
Also introduced a utility script to populate existing employee
Identities, grouping accounts by email address.
* main: (47 commits)
Remove overflow from columns
Only reverse Watching button if icon_only
Move video captions below content
Account#slug uses the virtual "tenant" attribute
Rename LOCAL_AUTHENTICATION to OSS_CONFIG
Add a script to generate unique passwords per email address
Visually hide the pagination indicator
Use hide avatars from tabindex on preview
Render a helpful menu of tenants temporarily
Remove code related to Launchpad auth or 37id Users
Formatting
Fix missing close bracket from merge
Reverse involvement buttons if watching
Only render the manifest link for tenanted URLs
Move load-balancer to fizzy-lb-101
Add otel_collector accessory for load balancer
Fix: this was getting idiomorph confused as it was being invoked on many subtree elements
Keep column popups during page refreshes
Don't render next link unless there is more activity
Live updates for the collection perma
...
Mike Dalessio