Repository navigation

fix(plugin-auth)!: implicit account linking requires the standard local-ownership condition; unlink is honoured - #21872

Merged

objectstack-fleet[bot] merged 10 commits into

mainfrom

claude/issue-21846-implicit-account-linking

Oct 6, 2026

Commits on Oct 5, 2026

wip(plugin-auth): implicit account linking gate
claude
committed
d46a6b4
test(plugin-auth): pin implicit account linking conditions
claude
committed
2debeef
chore(changeset): implicit account linking ownership
claude
committed
80f8b06
chore(gates): record the new pinned engine double
claude
committed
3532f09
docs(plugin-auth): state the linking precondition at class level
claude
committed
6b0f00e
fix(plugin-auth): fail an unlink closed, bind explicit links to their user, clear records on user delete
claude
committed
598e7a7
test(plugin-auth): id-token, forged state, explicit unverified link, OIDC discovery, fail-closed unlink, user delete
claude
committed
07ba1e9
docs(auth): state the implicit linking and unlink rules
claude
committed
83010a6
fix(plugin-auth): unlink records are one durable row per provider; platform exception bound to the OAuth method
claude
committed
93ed024
docs(changeset): note the one-time effect on in-flight verification values for hosts with secondaryStorage
claude
committed
f7814a1