Files
firefrost-operations-manual/docs/consultations
Claude (Chronicler #61) 5253d4a70a docs: Gemini Round 6 — User onboarding, pending state, founder seeding
Zero-Trust + Webhook approach:
- New users land in 'pending' state
- Founders (Michael, Meg, Holly) pre-seeded as 'approved'
- Discord webhook alerts admin channel on new login
- Gatekeeper middleware traps pending users
- Branded 'Access Pending' page

New files:
- migrations/003_auth_users.sql (users table + founder seeds)
- src/core/auth/webhook.js (Discord notification)
- src/core/auth/strategy.js (OAuth callback with upsert)
- src/core/auth/middleware.js (requireActiveUser gatekeeper)
- src/core/auth/views/pending.ejs (locked gate view)

Architecture is now fully airtight.

Signed-off-by: Claude (Chronicler #61) <claude@firefrostgaming.com>
2026-04-05 11:59:36 +00:00
..