Linked accounts page: list, link, unlink with fresh proof (merge design step 2)

heimdall commented

2026-11-13 19:44:21 +00:00

Member

Step 2 of the account-merge design: a signed-in member sees their Heimdall provider logins, starts a link for another provider, and unlinks with a step-up proof; the last-identity refusal is shown. No merge.

Bifrost keeps no Heimdall token: list and unlink each follow a fresh Heimdall sign-in (unlink with stepUp:true); the bearer lives in one request. Snapshot of non-secret fields is in process memory, 5 min, keyed by account.
New page /Membership/LinkedAccounts; the Status Google button is replaced by it.
Docs: docs/linked-accounts.md. Bifrost has no changelog file.
Tests: 1469 pass / 18 fail (same 18 BridgeCli/ProviderAdvertisement failures as clean main, environmental). 16 mutations, all caught.
Limits: only Google can give step-up on the bifrost profile and it is unconfigured live (503), so unlink cannot complete in production until that changes. Nothing ran against a live Heimdall.
Not deployed.

🤖 Generated with Claude Code

Step 2 of the account-merge design: a signed-in member sees their Heimdall provider logins, starts a link for another provider, and unlinks with a step-up proof; the last-identity refusal is shown. No merge. - Bifrost keeps no Heimdall token: list and unlink each follow a fresh Heimdall sign-in (unlink with stepUp:true); the bearer lives in one request. Snapshot of non-secret fields is in process memory, 5 min, keyed by account. - New page /Membership/LinkedAccounts; the Status Google button is replaced by it. - Docs: docs/linked-accounts.md. Bifrost has no changelog file. - Tests: 1469 pass / 18 fail (same 18 BridgeCli/ProviderAdvertisement failures as clean main, environmental). 16 mutations, all caught. - Limits: only Google can give step-up on the bifrost profile and it is unconfigured live (503), so unlink cannot complete in production until that changes. Nothing ran against a live Heimdall. - Not deployed. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

heimdall added 2 commits

2026-11-13 19:44:21 +00:00

Linked accounts page: list, link any admitted provider, unlink with step-up proof 59ecaa606b

A member sees their Heimdall logins, links Discord, Patreon or Google, and unlinks one
with a fresh Google step-up sign-in. Bifrost keeps no Heimdall token: each action is a
fresh Heimdall sign-in started by Bifrost whose bearer lives inside the completion
request. The list is kept five minutes in this process as non-secret fields only.

The Status page's Google-only link button and handler are cut; the Linked accounts page
owns link starts. HeimdallStartRequest gains stepUp. Heimdall's member routes use a
client without the app secret.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Linked accounts: docs, README line, proof-provider and no-store tests b65bec65ce

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

heimdall added 1 commit

2026-11-13 20:08:09 +00:00

Linked accounts: never guess a proof provider; require stepUpRequested; no-store on completion 8e65f56b0c

With no current list the proof goes only through a provider the member names, never the
session's sign-in provider: a sign-in through an unlinked provider makes Heimdall mint an
orphan account holding that login. Link buttons need a current list. The unlink completion
must say a step-up was requested. POST /auth/heimdall/complete answers no-store. The fake
Heimdall now models orphan minting, derives step_up_at from the start's stepUp flag, and
enforces the app secret, sign_in-only, unsupported-provider and 600 s rules.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

heimdall added 1 commit

2026-11-13 20:23:57 +00:00

Linked accounts: drop the list after an unlink with an uncertain end; Google never mints; docs 18f1ec6aca

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

heimdall merged commit c20947af1c into main

2026-11-13 20:24:16 +00:00

heimdall referenced this pull request from a commit

2026-11-13 20:24:18 +00:00

Merge pull request 'Linked accounts page: list, link, unlink with fresh proof (merge design step 2)' (#84) from heimdall/linked-accounts into main

Rows
Columns

Linked accounts page: list, link, unlink with fresh proof (merge design step 2) #84