fix(account): show username, not the Kanidm UUID (#63) #70

Sammanfogat

supernaut sammanfogade 1 incheckning från fix/63-account-username-display in i main

2026-07-19 20:59:08 +00:00

supernaut kommenterad

2026-07-19 20:48:50 +00:00

Ägare

#63 (MEDIUM) — account panel showed the Kanidm UUID as the username

account-panel.astro rendered {user.sub} (the Kanidm subject UUID) under the panel.account.username label. preferred_username was read into OidcClaims but discarded by userFromClaims, so it never reached SessionUser.

Fix

SessionUser gains username?: string (the OIDC preferred_username / Kanidm short handle).
userFromClaims persists username: claims.preferred_username.
The panel renders {user.username ?? user.sub} — real handle, with sub as a graceful fallback.
sub is retained (API references like the reconciler group write); it's just no longer shown as the username.

Validation

pnpm check (0 errors), eslint clean, pnpm test (53 pass).

Closes #63.

## #63 (MEDIUM) — account panel showed the Kanidm UUID as the username `account-panel.astro` rendered `{user.sub}` (the Kanidm subject **UUID**) under the `panel.account.username` label. `preferred_username` was read into `OidcClaims` but discarded by `userFromClaims`, so it never reached `SessionUser`. ## Fix - `SessionUser` gains `username?: string` (the OIDC `preferred_username` / Kanidm short handle). - `userFromClaims` persists `username: claims.preferred_username`. - The panel renders `{user.username ?? user.sub}` — real handle, with `sub` as a graceful fallback. - `sub` is retained (API references like the reconciler group write); it's just no longer shown as the username. ## Validation `pnpm check` (0 errors), eslint clean, `pnpm test` (53 pass). Closes #63.

supernaut lade till 1 incheckning

2026-07-19 20:48:50 +00:00

fix(account): show username, not the Kanidm UUID

ci / ci (pull_request) Successful in 1m0s

Detaljer

765a31045f

The account panel rendered user.sub (the Kanidm subject UUID) under the
username label; preferred_username was read into OidcClaims but dropped
by userFromClaims (#63).

Persist preferred_username as SessionUser.username and display it
(fallback to sub). sub is kept for API references, just not shown.

Validated: pnpm check (0 errors), eslint clean, pnpm test (53 pass).

Closes #63.