Close admin trust audit gaps and stabilize live sweeps
This commit is contained in:
@@ -31,6 +31,11 @@ Constraints:
|
||||
- Only `image/svg+xml`, `image/png`, or `image/jpeg` accepted.
|
||||
- Theme tokens restricted to a whitelist (no arbitrary CSS).
|
||||
|
||||
Persistence contract:
|
||||
- Authority persists branding under `authority.tenants.settings.consoleBranding`.
|
||||
- The stored record contains `displayName`, `logoUri`, `faviconUri`, `themeTokens`, `updatedAtUtc`, `updatedBy`, and `hash`.
|
||||
- `GET /console/branding` and `GET /console/admin/branding` must read the persisted record first and only fall back to static defaults when no tenant record exists yet.
|
||||
|
||||
## 4. Configuration Layering
|
||||
1. **Static defaults** from `/config.json`.
|
||||
2. **Tenant branding** from Authority after login.
|
||||
|
||||
Reference in New Issue
Block a user