47665927ab
Closes the bootstrap gap two parallel QA agents surfaced on 2026-04-22: fresh Authority DBs lacked the `default` tenant row so setup-wizard admin creation failed with users_tenant_id_fkey and /connect/token returned invalid_grant. Fix is on the migration path per AGENTS.md §2.7; the init script stays seeds-only as established in SPRINT_20260422_003. - New embedded migration 003_seed_default_tenants.sql performs `INSERT ... ON CONFLICT (tenant_id) DO NOTHING` for `default` and `installation`. Numeric prefix (not S-prefix) so the migration runner's Startup category auto-applies it; S-prefix files route to Seed category which is intentionally manual-only per StartupMigrationHost.cs:158. - `default` is strictly required (Authority's StandardPluginBootstrapper.DefaultTenantId; /internal/users bootstrap inserts under this FK). `installation` is not Authority-FK-referenced today but matches the empirical workaround both QA agents converged on and serves as defense for cross-service inserts that join authority.tenants.tenant_id. Fresh-volume verification (docs/qa/authority-default-tenant-20260422/): 1. docker compose down -v (20 volumes removed incl. compose_postgres-data) 2. docker compose up -d — 62 containers, Authority healthy in ~15s. 3. Startup log: applying 001 (144ms) → 002 (13ms) → 003 (7ms). authority.tenants contains default + installation. 4. POST /api/v1/setup/sessions → 201; database/valkey/migrations prereqs ran; admin/execute with admin/Admin@Stella2026! → 200 "Bootstrap administrator 'admin' ensured successfully." 5. POST /connect/token (password, stellaops-cli, ui.admin openid) → 200 + JWT carrying role=admin, stellaops:tenant=default. 6. docker compose restart authority → "Database is up to date for Authority." Clean no-op. Docs: docs/modules/authority/architecture.md §1.1 "Seeded bootstrap tenants (migration-owned)". Cross-link added to the archived prior sprint's Decisions & Risks so the lineage is traceable. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
8 lines
1.8 KiB
JSON
8 lines
1.8 KiB
JSON
{
|
|
"access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6IlJEWFVaVVBKSUpDSlFfSElJVFNFOURNU1hJRjlYNlZCQjNGQkpYU0EiLCJ0eXAiOiJhdCtqd3QifQ.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.FxvWuXponaw8ec9uC8rI925wENz75FQwNHqX4yxzMiYX3qaWndXSyXU1tQTqpXUE_dshUGuyexR86bj-apI6-_gLRV__1J5EDBS5ezXmsa2bm-ryGkzSTa-DqG5EUXV8Hed5BBeO9Mc-wcZzWusSdKUXGxz4XT092hwP6amGE8HqSzVTRUqBZHBnupdS5fgTUVh9II8Oy_GcFuPk9rUsRex7G6LZbcjY6H72y7o347ArX-DkmB6RO7fdbH1_7gB9GPpr-hVk1lv0mpHRvwMrJkctlRhLEcD9HbcObGmh4KhtMoCj7YA31UYhZc9jOcp-qx-Za1klqYE30L6nD-g9cw",
|
|
"token_type": "Bearer",
|
|
"expires_in": 1800,
|
|
"id_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6IlJEWFVaVVBKSUpDSlFfSElJVFNFOURNU1hJRjlYNlZCQjNGQkpYU0EiLCJ0eXAiOiJKV1QifQ.eyJpc3MiOiJodHRwczovL2F1dGhvcml0eS5zdGVsbGEtb3BzLmxvY2FsLyIsImV4cCI6MTc3Njg3MTgyMiwiaWF0IjoxNzc2ODY4NTIyLCJhdWQiOiJzdGVsbGFvcHMtY2xpIiwic3ViIjoiZWQ4N2NlMmEwMDA0NDI1Mzg4YzcyYmZjYjUzYWU0ZTciLCJuYW1lIjoiUGxhdGZvcm0gQWRtaW5pc3RyYXRvciIsImF6cCI6InN0ZWxsYW9wcy1jbGkiLCJhdF9oYXNoIjoiX2ZmRE42SUhNUi1nV21iaXptTGktdyJ9.aNKKICeXGqqB64zYOpg-fBM1D9to014LZHEWswZQ0hbm8HgrWC5eF8fyRSSrOn0KdAa72rbAJ82dVnarNz2E3wFJaYJcCMUx6IKiWsGS2lb86aNd_6g_mxDvGgLjHfLRrbXjuMGbsSgl0MXHwucKZXumxX6bz_qu1qLVzfgYoLPUS7F1ZnAEbATVoBnVljsdbhi6PCSpwVmMdCqWROrfJySJZAWiVsLoU3aduHpDuw_yJU9LOfJJ9rvo2KBAAzz6eQFoNXQUPeGc0mdBOClF1bQQCTaU_yhG1NSnkZTWGRvqWgOSFlqrH2F6GbI9sWisvEbj8OTzL7BZp1f80IF6Qw"
|
|
}
|
|
---HTTP 200---
|