Define signup, invitations, and OAuth account identity #8

New issue

Open

opened 2026-10-20 21:29:38 +00:00 by phg · 0 comments

phg commented

2026-10-20 21:29:38 +00:00

Owner

Part of #1

Question

How do signup controls, invitations, and OAuth login interact, and what identifies one member account?

Preserve open, disabled, and invitation-only signup; one-use, finite-use, and unlimited invitations via both codes and URLs; OAuth2 login creating a missing account even when signup is disabled. Decide the OAuth behavior in invitation-only mode, which configured providers qualify, whether creating an account also grants event access, and administrator bootstrap/roles.

Settle local login and email verification expectations, invitation use counting and concurrent redemption, expiry/revocation, provider identity keys, absent or unverified provider emails, and safe explicit account linking when email addresses match. Distinguish authentication, account creation, and permission to join a queue. Resolve with rules and examples, leaving vendor selection to architecture.

Part of #1 ## Question How do signup controls, invitations, and OAuth login interact, and what identifies one member account? Preserve open, disabled, and invitation-only signup; one-use, finite-use, and unlimited invitations via both codes and URLs; OAuth2 login creating a missing account even when signup is disabled. Decide the OAuth behavior in invitation-only mode, which configured providers qualify, whether creating an account also grants event access, and administrator bootstrap/roles. Settle local login and email verification expectations, invitation use counting and concurrent redemption, expiry/revocation, provider identity keys, absent or unverified provider emails, and safe explicit account linking when email addresses match. Distinguish authentication, account creation, and permission to join a queue. Resolve with rules and examples, leaving vendor selection to architecture.

phg added the

wayfinder:grilling

needs-info

labels

2026-10-20 21:29:38 +00:00

phg added a new dependency

2026-10-20 21:29:44 +00:00

#11 Choose the application architecture and deployment contract

phg added a new dependency

2026-10-20 21:29:45 +00:00

#12 Evaluate member and admin journeys in four live-switchable designs

phg referenced this issue