Commit graph Bifrost/tests/Bifrost.Web.Tests/Support/RegistrationKit.cs
Author SHA1 Message Date
Heimdall
dff217329f Chat sign-in needs a live consent receipt; notice frozen as version 1
Meta's ruling 2026-11-11. The OIDC issuer (the chat tier) now requires a live
receipt for TrainingNotice.Version: a refused authorize redirects to the consent
page with the parked request as returnUrl; token and userinfo re-read the receipt;
the back-channel reconciler ends sessions of accounts whose receipt is gone.
Notice relabelled version 1 with a pinned hash; docs add a Before deploy step
(clear ConsentReceipts), deploy and smoke notes.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-11 14:15:37 +00:00
33be966b7d Registration gates: proof-of-work CAPTCHA and training-notice consent receipt (#54) 2026-11-11 10:15:46 +00:00