mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 4.7
4dcb1e866e
Adds the four-container Jitsi Meet stack (web, prosody, jicofo, jvb) with a 3-variant matrix: V1 oauth2-proxy gate + Keycloak LDAP federation, V2 no-auth anonymous, V3 direct prosody mod_auth_ldap2 against svc-db-openldap. Auth model is oauth2-proxy at the reverse proxy because Jitsi has no native OIDC adapter — JWT-via-Keycloak would require a custom token server outside this repo. The role injects a fixed-position `[data-injected-logout]` button via templates/javascript.js.j2 so the no-built-in-logout React SPA satisfies the persona contract's no-direct-URL logout rule. V2/V3 declare PERSONA_BIBER_BLOCKED / PERSONA_ADMINISTRATOR_BLOCKED because the shared persona helpers only model the OIDC redirect chain. Final FULL-matrix `mode=reinstall full_cycle=true` run green across all three variants (V1: 6/6 pass, V2/V3: 2 pass + 4 blocked skips). Also lands utils/parse_trace.py — a small zipfile helper used during the iteration to extract URL traces from playwright .trace bundles. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
3 lines
22 B
YAML
3 lines
22 B
YAML
---
|
|
administrator: {}
|