11 Commits (ca9e6cedbf50998bb95e6b65464cfd9062e210fd)

Author	SHA1	Message	Date
Omar	9e41d3a577	Bridge Clerk apex SSO into Devise via clerk-sdk-ruby ... Reads the __session cookie set by accounts.bloombilt.com on the .bloombilt.com apex, verifies it via the official Clerk Ruby SDK, then finds or auto-provisions the matching Devise User on Account.first so the rest of the app (CanCanCan + Devise) sees the request as authenticated. Sign-out and unauthed redirects both target accounts.bloombilt.com/sign-in so 1Password sees a single saved entry across all Bloombilt apps. This is independent of the dead Clerk OIDC code already on master — that path requires Clerk Pro to register an OAuth Application on the production instance and is left dormant (gated by Docuseal.clerk_oidc_enabled?) in case we upgrade later. The session-cookie bridge works on Clerk free. Devise password login at /users/sign_in stays reachable as emergency access but isn't linked from the UI. Files: - Gemfile: add clerk-sdk-ruby (requires bundle install) - config/initializers/clerk.rb: SDK config (uses ENV['CLERK_SECRET_KEY']) - app/controllers/concerns/clerk_devise_bridge.rb: the bridge itself - app/controllers/application_controller.rb: include the concern, override authenticate_user! to redirect to Account Portal - app/controllers/sessions_controller.rb: override respond_to_on_destroy to send sign-out to Account Portal Gemfile.lock NOT updated in this commit — needs `bundle install` on a host with Ruby 4.0.1 before deploy will succeed.	4 weeks ago
Pete Matsyburka	fcdc44ddbe	update rails	10 months ago
Oleksandr Turchyn	e9d728fa4a	add i18n	2 years ago
Pete Matsyburka	af787887d8	i18n sign in	2 years ago
Pete Matsyburka	fefd138dfd	add devise log	2 years ago
Pete Matsyburka	15dafcb6ff	downcase email when sign in	2 years ago
Alex Turchyn	b6d350ebbd	fix no error messages when sign in with wrong credentials	3 years ago
Alex Turchyn	ef618f8f49	add 2FA	3 years ago
Alex Turchyn	e1342860c4	add redirect handler	3 years ago
Alex Turchyn	4c8a706906	do not show signed in alert	3 years ago
Alex Turchyn	6f3fe1dd7b	improve registration and add oauth	3 years ago