openvibers/openvibe.network Commits

Reviews grants (Wave 17); redirect URIs for reviews and news

OP OpenVibers committed 23 Sept 2026 · f4e0898019 · 2 files, +8 −0





Changes
ddiff --git a/server/db/database.js b/server/db/database.js
iindex 55cf6f96..4a1e03cb 100644
---- a/server/db/database.js
++++ b/server/db/database.js
@@@ -588,6 +588,8 @@ function initDb(dbPath) {
              { client_id: 'wiki', name: 'OpenVibe.Wiki', redirect_uris: ['https://openvibe.wiki/auth/callback'] },
              { client_id: 'blog', name: 'OpenVibe.Blog', redirect_uris: ['https://openvibe.blog/auth/callback'] },
              { client_id: 'openre', name: 'OpenRe.Stream', redirect_uris: ['https://openre.stream/auth/callback'] },
++            { client_id: 'reviews', name: 'OpenVibe.Reviews', redirect_uris: ['https://openvibe.reviews/auth/callback'] },
++            { client_id: 'news', name: 'OpenVibe.News', redirect_uris: ['https://openvibe.news/auth/callback'] },
              // Billing's staff console (Wave 8): Network admins listed in BILLING_STAFF_SUBJECTS.
              { client_id: 'billing', name: 'OpenVibe.Billing', redirect_uris: ['https://billing.openvibe.network/auth/callback'] },
          ];
ddiff --git a/server/identity/principals.js b/server/identity/principals.js
iindex 590e15b4..4ba9ca34 100644
---- a/server/identity/principals.js
++++ b/server/identity/principals.js
@@@ -67,6 +67,12 @@ const DEFAULT_GRANTS = [
      ['vip', 'events.event.publish', 'openvibe.events', []],
      ['vip', 'events.subscription.manage', 'openvibe.events', []],
      ['vip', 'identity.subject.resolve', SELF_AUDIENCE, []],
++    // Wave 17: Reviews reads Sources review items (and follows them by event), links Community discussion.
++    ['reviews', 'sources.item.read', 'openvibe.sources', []],
++    ['reviews', 'sources.source.read', 'openvibe.sources', []],
++    ['reviews', 'events.event.publish', 'openvibe.events', []],
++    ['reviews', 'events.subscription.manage', 'openvibe.events', []],
++    ['reviews', 'community.comment.write', 'openvibe.community', []],
      // Wave 3: producers publish to OpenVibe.Events (their own source only, enforced by Events).
      ...['live', 'media', 'network', 'community', 'billing', 'chat', 'tools', 'games', 'search', 'sources', 'tips'].map(c => [c, 'events.event.publish', 'openvibe.events', []]),
      // Wave 14: Search subscribes to <owner>.index_document.* deliveries.