portal: Zielmodul portal beim Token-Abruf (B-05) #397

Merged
patrick merged 1 commits from feat/portal-token-modul into main 2026-10-28 11:32:51 +01:00
Owner

Karte B-05 (Entscheidung: portal als eigenes Zielmodul).

  • createSession in @nexarch/shl bekommt die Option module; sie haengt ?module=<name> an /auth/module-token. Ohne Option unveraendert.
  • Portal setzt sie aus NEXT_PUBLIC_TOKEN_MODULE (Build-Variable, leer = wie bisher).
  • README: Ausrollreihenfolge (erst Core NEXARCH_ACCOUNT_MODULE_AUDIENCES um portal erweitern, dann Portal mit NEXT_PUBLIC_TOKEN_MODULE=portal und PORTAL_TOKEN_AUDIENCE=portal), Netz-Hinweis zur unauthentifizierten Statusseite (B-07).

Auswirkungen

Ohne die Variablen aendert sich nichts. Mit portal als Zielmodul akzeptiert das Portal keine fuer dms ausgestellten Tokens mehr; falsche Reihenfolge beim Ausrollen laesst den Token-Abruf scheitern (Core lehnt unbekanntes Zielmodul ab).

Tests

131: shl 66/66, portal 37/37.

🤖 Generated with Claude Code

Karte B-05 (Entscheidung: portal als eigenes Zielmodul). - `createSession` in `@nexarch/shl` bekommt die Option `module`; sie haengt `?module=<name>` an `/auth/module-token`. Ohne Option unveraendert. - Portal setzt sie aus `NEXT_PUBLIC_TOKEN_MODULE` (Build-Variable, leer = wie bisher). - README: Ausrollreihenfolge (erst Core `NEXARCH_ACCOUNT_MODULE_AUDIENCES` um `portal` erweitern, dann Portal mit `NEXT_PUBLIC_TOKEN_MODULE=portal` und `PORTAL_TOKEN_AUDIENCE=portal`), Netz-Hinweis zur unauthentifizierten Statusseite (B-07). ## Auswirkungen Ohne die Variablen aendert sich nichts. Mit `portal` als Zielmodul akzeptiert das Portal keine fuer `dms` ausgestellten Tokens mehr; falsche Reihenfolge beim Ausrollen laesst den Token-Abruf scheitern (Core lehnt unbekanntes Zielmodul ab). ## Tests 131: shl 66/66, portal 37/37. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
patrick added 1 commit 2026-10-28 10:19:08 +01:00
portal: Zielmodul beim Token-Abruf (NEXT_PUBLIC_TOKEN_MODULE), Betriebsdoku
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
7df4cd573f
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
patrick merged commit ff79bf7514 into main 2026-10-28 11:32:51 +01:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: scripte/nexarch#397