zooqueen aba085af6b fix(auth): org-agnostic password login — resolve real owner-org, not pinned brand ...

LoginForm no longer pins organization=<brand> on POST /v1/iam/login. It passes
the new (normally-unset) TenantConfig.loginOrg, and client.login() OMITS the
organization field when empty so IAM runs cross-org resolution and the session
encodes the user's REAL owner-org (GetOrganizationByUser), never the hint.

Fixes: global admins (z@/[email protected], [email protected] — owner=admin) were
truncated to a 1-org 'hanzo' session via the UI because the pinned org made
GetUserByFields hit the colliding hanzo/<name> row first, so the cross-org
fallback to admin/<name> never ran. IAM IsGlobalAdmin()==(Owner=='admin') and
get-organizations returns all orgs only for a global admin. Verified live on
hanzo.id: [email protected] -> owner=admin, 45 orgs; brand-only user -> 1 org.

Boundaries preserved: signup still sends a concrete org; per-app SSO
(client_id+redirect_uri, type=code) still mints a code bound to the resolved
user; a brand can force single-org login via loginOrg in the catalog ConfigMap.
Contract locked in pkgs/auth/src/client.test.ts.

Bump 0.1.22 -> 0.1.23.

2026-06-23 15:24:32 -07:00

..

src

fix(auth): org-agnostic password login — resolve real owner-org, not pinned brand

2026-06-23 15:24:32 -07:00

package.json

fix(social): real Google endpoint + registered redirect_uri (iam.hanzo.ai/callback)

2026-06-22 23:26:35 -07:00

tsconfig.json

fix(tenant): catalog-only hosts resolve their OWN brand; drop orphan divider

2026-06-20 02:38:31 -07:00