Repository navigation

feat: Sign in on the secure window for a session card code can't reach, and require it to mint key write tickets - #6776

Merged

habdelra merged 25 commits into

mainfrom

cs-13996-the-secure-window-signs-in-on-its-own-a-credential-card-code

Oct 19, 2026

Merged

feat: Sign in on the secure window for a session card code can't reach, and require it to mint key write tickets#6776
habdelra merged 25 commits into
mainfrom
cs-13996-the-secure-window-signs-in-on-its-own-a-credential-card-code

Commits on Oct 16, 2026
- Sign in on the secure origin for a session that can mint key write tickets
  
  habdelra
  and
  claude
  committed
  97e18ac
- Drive the secure window's sign-in in the browser, and brand Synapse's SSO confirmation
  
  habdelra
  and
  claude
  committed
  1135605
- Sign in with Google as the realm server's own client, and with a password in one request
  
  habdelra
  and
  claude
  committed
  c288e7e
- Limit password sign-ins, and keep the CLI's key session until the server ends it
  
  habdelra
  and
  claude
  committed
  85a6ff4
- Lay the secure window's Google option out across the form, and show errors as sentences
  
  habdelra
  and
  claude
  committed
  f88dfc1
- Screenshots of the secure window's sign-in for the PR description
  
  habdelra
  and
  claude
  committed
  8c3daff
- Remove the PR description's screenshots from the branch
  
  habdelra
  and
  claude
  committed
  25b3ba8
- Call the key sign-in plain "Sign in to Boxel"
  
  habdelra
  and
  claude
  committed
  c759376
- Keep a key-management sign-in for a week, and keep the signed-in screen to just that
  
  habdelra
  and
  claude
  committed
  01676a4
- Tell the user they can close the window once signed in
  
  habdelra
  and
  claude
  committed
  1946235
- Drop the signed-in screen's Sign out button
  
  habdelra
  and
  claude
  committed
  0e52b7c
- Screenshots of the sign-in for the PR description
  
  habdelra
  and
  claude
  committed
  5b43ca4
- Remove the PR description's screenshots from the branch
  
  habdelra
  and
  claude
  committed
  c2834a3
- Title the sign-in plainly "Sign in to Boxel", with room above Continue with Google
  
  habdelra
  and
  claude
  committed
  596c276
- Say "You're signed in to Boxel" once signed in
  
  habdelra
  and
  claude
  committed
  a6ac34f
- Show the CLI the same sign-in as the browser's
  
  habdelra
  and
  claude
  committed
  29bb225
- Screenshots of the sign-in for the PR description
  
  habdelra
  and
  claude
  committed
  491eea2
- Remove the PR description's screenshots from the branch
  
  habdelra
  and
  claude
  committed
  d5ea6a2
- Centre the sign-in's title, with twice the room above Continue with Google
  
  habdelra
  and
  claude
  committed
  484ff70
- Screenshots of the sign-in for the PR description
  
  habdelra
  and
  claude
  committed
  2330b6b
- Remove the PR description's screenshots from the branch
  
  habdelra
  and
  claude
  committed
  f9c9d2c
- Leave secure_sessions readable by its owner, and check no read-only reader can read it
  
  habdelra
  and
  claude
  committed
  f120931
Commits on Oct 19, 2026

Navigation Menu

Repository navigation

feat: Sign in on the secure window for a session card code can't reach, and require it to mint key write tickets - #6776

feat: Sign in on the secure window for a session card code can't reach, and require it to mint key write tickets#6776
habdelra merged 25 commits into
mainfrom
cs-13996-the-secure-window-signs-in-on-its-own-a-credential-card-code

Commits on Oct 16, 2026

Sign in on the secure origin for a session that can mint key write tickets

Drive the secure window's sign-in in the browser, and brand Synapse's SSO confirmation

Sign in with Google as the realm server's own client, and with a password in one request

Limit password sign-ins, and keep the CLI's key session until the server ends it

Lay the secure window's Google option out across the form, and show errors as sentences

Screenshots of the secure window's sign-in for the PR description

Remove the PR description's screenshots from the branch

Call the key sign-in plain "Sign in to Boxel"

Keep a key-management sign-in for a week, and keep the signed-in screen to just that

Tell the user they can close the window once signed in

Drop the signed-in screen's Sign out button

Screenshots of the sign-in for the PR description

Remove the PR description's screenshots from the branch

Title the sign-in plainly "Sign in to Boxel", with room above Continue with Google

Say "You're signed in to Boxel" once signed in

Show the CLI the same sign-in as the browser's

Screenshots of the sign-in for the PR description

Remove the PR description's screenshots from the branch

Centre the sign-in's title, with twice the room above Continue with Google

Screenshots of the sign-in for the PR description

Remove the PR description's screenshots from the branch

Leave secure_sessions readable by its owner, and check no read-only reader can read it

Commits on Oct 19, 2026

Merge remote-tracking branch 'origin/main' into cs-13996-the-secure-window-signs-in-on-its-own-a-credential-card-code

Record ADR 005: authorize key changes only with a session card code can't reach

Merge remote-tracking branch 'origin/main' into cs-13996-the-secure-window-signs-in-on-its-own-a-credential-card-code