schalli/tessera-ctl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 14 Wiki Activity

docs(02): create phase 2 authentication & multi-tenancy plans

Browse Source 
5 plans across 4 waves covering all 9 requirements (AUTH-01..06, TNNT-01..03)
and 18 locked decisions (D-01..D-18):
- Plan 01 (W1): Backend auth foundation with Prisma schema, RLS, JWT, admin seed
- Plan 02 (W2): Frontend auth flow, login page, user/tenant CRUD admin pages
- Plan 03 (W2): SUS package verification, password reset, force-change interceptor
- Plan 04 (W3): LDAP sync service, per-tenant config, field mapping, admin UI
- Plan 05 (W4): Visual verification of complete auth and multi-tenancy system

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Schalli
2026-06-18 13:10:13 +02:00
parent 4da1c99807
commit e8e89686f5
6 changed files with 1584 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.planning/ROADMAP.md
+22 -3
View File
@@ -36,7 +36,7 @@ Decimal phases appear between their surrounding integers in numeric order.
4. User can switch between German and English interface language
5. All UI strings are rendered through the i18n framework (no hardcoded text)
**Plans**: 3 plansPlans:
**Plans**: 3 plans
**Wave 1**
- [x] 01-01-PLAN.md -- Walking Skeleton: Monorepo + Docker Compose stack with NestJS, Next.js, PostgreSQL, Traefik
@@ -65,7 +65,26 @@ Decimal phases appear between their surrounding integers in numeric order.
4. Admin can create and manage tenants, and each user's data is isolated per tenant via RLS
5. Users can be imported from an LDAP/AD directory
**Plans**: TBD
**Plans**: 5 plans
**Wave 1**
- [ ] 02-01-PLAN.md -- Backend Auth Foundation: Prisma schema, RLS migration, JWT Passport auth, admin seed, tenant middleware
**Wave 2** *(blocked on Wave 1 completion)*
- [ ] 02-02-PLAN.md -- Frontend Auth & CRUD: Login page, Next.js middleware, user/tenant management UI, auth-wired portal
- [ ] 02-03-PLAN.md -- Password Reset & Mail: SUS package verification, MailModule, password reset flow, force-change interceptor
**Wave 3** *(blocked on Wave 2 completion)*
- [ ] 02-04-PLAN.md -- LDAP Integration: LDAP sync service, per-tenant config, field mapping, admin UI
**Wave 4** *(blocked on Wave 3 completion)*
- [ ] 02-05-PLAN.md -- Visual Verification: Human confirms complete auth and multi-tenancy flow
**UI hint**: yes
### Phase 3: Module System & Domaincheck
@@ -139,7 +158,7 @@ Phases execute in numeric order: 1 -> 2 -> 3 -> 4 -> 5 -> 6
| Phase | Plans Complete | Status | Completed |
|-------|----------------|--------|-----------|
| 1. Foundation & Portal Shell | 2/3 | In Progress | - |
| 2. Authentication & Multi-Tenancy | 0/TBD | Not started | - |
| 2. Authentication & Multi-Tenancy | 0/5 | Not started | - |
| 3. Module System & Domaincheck | 0/TBD | Not started | - |
| 4. Marketplace & Portal Navigation | 0/TBD | Not started | - |
| 5. Dashboard & Calendar | 0/TBD | Not started | - |