Where do I find what can break?¶
This page indexes every refusal, every default chosen because the other failed, and every trap met in use. For a map of all pages, see the index. Ask: what goes wrong if I do the obvious thing?
Policy and clients¶
| Page | Covers |
|---|---|
| policy validation | what the loader refuses, so a typo fails a rollout and not a sign-in |
| self-describing clients | what a client that serves a document may do, and why there is no stale fallback |
| resources | what a client asking for a resource gets and what it is refused |
| Slack channel bindings | what the loader refuses about Slack channels |
| GitHub bindings | what the render refuses about GitHub bindings |
| GitHub App tokens | how a token request is refused and what the audit trail records |
| Slack Apps | how a Slack App install is refused |
Configuration and operation¶
| Page | Covers |
|---|---|
| configuration | the strict values schema and the values that refuse to render unset |
| failure semantics | what happens when the directory, the store or the issuer is down |
| endpoints: hardening | the security headers, HSTS rule, body limits and timeouts of every response |
| recovery | the password door, its per-source 429 throttle and the switch that turns it off |
| trust and lost operator access | the way back in when nobody can sign in |
| check health | what each unhealthy state means |
| unreachable installation | what to do when you cannot reach it |
| console app traps | putting a console behind the gateway |
| sluisctl exit codes | every failure of sluisctl bao, pg and psql, and a key it never overwrites |
What the Slack controller refuses¶
The Slack pass lists what the controller will not do. It creates no account and touches no user group. It removes nobody from a public channel, converts no visibility, unarchives nothing and invites or removes no guest. It removes nobody the directory has not vouched for.
| Page | Covers |
|---|---|
| breakers and confirming one | the two removal breakers, the fingerprint an operator confirms, its 24-hour lapse |
| dry run | every workspace is a dry run until the chart lists it; removing it is the emergency stop |
| modes | extend is the default; strict is for private channels and refused for a public one; Slack Connect is always extend |
| console channels | a channel defined in git and the console is held; archiving is off by default |
| connect a workspace | a team that is not the recorded one is revoked; the configuration token is never stored or logged |
Elsewhere¶
| Page | Covers |
|---|---|
| conformance findings | what the OpenID conformance suite found, and what was fixed |
| CONTRIBUTING | the fixes not to reach for |
| SECURITY | reporting a vulnerability, and design notes to read first |