andy/blackwall-auth-sdk
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

docs: note disabled projects may be omitted from assignment views

Browse Source 
Clarify integration expectation that provider-side project visibility can be restricted to active projects, even when historical assignments remain.
This commit is contained in:
Andy Dixon
2026-02-26 12:27:25 +00:00
parent d97638201e
commit 78606bf751
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/INTEGRATION_GUIDE.md
+1
View File
@@ -140,6 +140,7 @@ Provider login/authorization steps can also fail with `access_denied` when accou
WebAuthn-based login verification can return credential-style failures for disabled accounts even when authenticator assertions are otherwise valid. WebAuthn-based login verification can return credential-style failures for disabled accounts even when authenticator assertions are otherwise valid.
Existing authenticated sessions may also be invalidated when account status changes to disabled. Existing authenticated sessions may also be invalidated when account status changes to disabled.
OAuth authorization consent submission can return `access_denied` if the account becomes inactive between session establishment and consent completion. OAuth authorization consent submission can return `access_denied` if the account becomes inactive between session establishment and consent completion.
Provider user/project assignment views may exclude disabled projects even if historical assignments exist.
## Operational guidance ## Operational guidance