pad/docs at bf37b59e71a533ce773be3663cf0c523c85dd5c4 - pad

mirror of https://github.com/PerpetualSoftware/pad.git synced 2026-10-26 22:37:03 +00:00

Files

T

xarmian 241dd316f9 fix(auth): a social sign-in without a provider subject is refused on an account with one bound (BUG-3671) [deploy BEFORE pad-cloud #80 ] (#2144 )

* fix(auth): a social sign-in without a provider subject is refused on an account with one bound (BUG-3671)

TASK-3351 binds a provider subject on the first subject-bearing sign-in
of a linked provider and refuses a different one, but a sign-in carrying
NO subject still reached the account on its email alone. Once a subject
is bound for that provider, that is refused too (oauth_subject_mismatch,
with TASK-3351's recovery route). A caller that never sends subjects
binds none and keeps the email path, so this is inert until pad-cloud
sends subjects (deploy this server first, then pad-cloud).

Claude-Session: https://claude.ai/code/session_01Q9WssCjFuHjSfLABoW4tmS

* docs(api): oauth-login/link subjects and the BUG-3671 refusal

Claude-Session: https://claude.ai/code/session_01Q9WssCjFuHjSfLABoW4tmS

* test(auth): a subject-less sign-in to a bound TOTP account gets no challenge; a subject-less link keeps the bound subject (BUG-3671, Codex r1)

Claude-Session: https://claude.ai/code/session_01Q9WssCjFuHjSfLABoW4tmS

2026-10-14 02:02:41 -04:00

brand

feat(brand): the Pad mark is the brand: one vector master, the app's icons, header and link card from it (TASK-3514) (#1926 )

2026-10-08 23:28:47 -04:00

screenshots

docs: fresh 2x product screenshots (dark and light) and a tightened README (TASK-3426) (#1816 )

2026-10-05 19:03:24 -04:00

api.md

fix(auth): a social sign-in without a provider subject is refused on an account with one bound (BUG-3671) [deploy BEFORE pad-cloud #80 ] (#2144 )

2026-10-14 02:02:41 -04:00

architecture.md

ci(web): decide the npm audit gate from the report, not the exit code, and run it last (BUG-2881) (#1247 )