First-login owner #19

Merged

arne merged 6 commits from first-login-owner into main

2026-04-14 13:33:12 +02:00

arne commented

2026-04-14 13:33:07 +02:00

Owner

Summary

Replace required BOOKS_OIDC_OWNER_SUB with first-login-wins ownership claim
New settings key/value table (migration 006); ClaimOwnerSub uses INSERT ... ON CONFLICT DO NOTHING
*Auth caches the owner in an atomic.Pointer[string], loaded in New and refreshed by the OIDC callback
Recovery is manual SQLite edit + restart (no admin API)

Test plan

go test ./... passes
On a.bas.es: install books, log in via Pocket ID first, confirm shelf/admin views work
Verify a second OIDC user logging in is treated as user (not owner)

## Summary - Replace required `BOOKS_OIDC_OWNER_SUB` with first-login-wins ownership claim - New `settings` key/value table (migration 006); `ClaimOwnerSub` uses `INSERT ... ON CONFLICT DO NOTHING` - `*Auth` caches the owner in an `atomic.Pointer[string]`, loaded in `New` and refreshed by the OIDC callback - Recovery is manual SQLite edit + restart (no admin API) ## Test plan - [x] `go test ./...` passes - [ ] On a.bas.es: install books, log in via Pocket ID first, confirm shelf/admin views work - [ ] Verify a second OIDC user logging in is treated as user (not owner)

arne added 6 commits

2026-04-14 13:33:08 +02:00

Spec: first-login owner 63e6b16c6c

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Plan: first-login owner e4313a8b2d

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Add settings key/value table migration b9278de992

Add settings store with ClaimOwnerSub / GetOwnerSub e6fea34a64

Make first login claim ownership, drop BOOKS_OIDC_OWNER_SUB b4dfd2c978

Replaces the static Config.OwnerSub / BOOKS_OIDC_OWNER_SUB env var with
a first-login-wins scheme: ExchangeCode now calls ClaimOwnerSub after
creating a session, and ResolveViewer reads ownership from an atomic
cache loaded from the settings table at startup.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Docs: drop BOOKS_OIDC_OWNER_SUB from README and Basefile 9e889e9252