app/stories/README.md

idp.global User Stories

This directory contains user stories for the idp.global Identity Provider platform, organized by persona.

Directory Structure

stories/
├── end-user/           # Stories for regular users (8)
├── organization-owner/ # Stories for organization admins (11)
├── developer/          # Stories for API/SDK consumers (8)
└── admin/              # Stories for platform administrators (8)

Story Index

End User (EU)

ID	Title	Priority	Source
EU-001	Multi-Device Login Sessions	High	TODO
EU-002	Complete Password Reset Flow	Critical	Incomplete
EU-003	View and Manage Logged-in Devices	Medium	TODO
EU-004	Enable Two-Factor Authentication	High	New
EU-005	Login with Social Providers	Medium	New
EU-006	Delete My Account	Medium	New
EU-007	View Login History	Low	New
EU-008	Upload Profile Avatar	Low	New

Organization Owner (ORG)

ID	Title	Priority	Source
ORG-001	Sync Billing Plans with Users	High	TODO
ORG-002	Invite and Manage Team Members	Critical	New
ORG-003	Assign Roles to Members	High	Partial
ORG-004	Customize Organization Branding	Medium	New
ORG-005	View Organization Usage Analytics	Medium	New
ORG-006	Configure SSO for Organization	High	New
ORG-007	View Organization Audit Logs	Medium	New
ORG-008	Manage Subscription and Billing	Medium	Enhance
ORG-009	Connect Global Apps	High	New
ORG-010	Browse and Install Partner Apps	Medium	New
ORG-011	Create Custom OIDC Apps	Medium	New

Developer (DEV)

ID	Title	Priority	Source
DEV-001	Create and Manage API Tokens	High	Partial
DEV-002	Comprehensive SDK Documentation	High	New
DEV-003	Configure Webhook Notifications	Medium	New
DEV-004	Proper App ID Initialization	High	TODO
DEV-005	Register OAuth Client App	Medium	New
DEV-006	Understand API Rate Limits	Low	New
DEV-007	Validate JWTs in My Application	Medium	Enhance
DEV-008	Submit App to AppStore	Low	New

Platform Admin (ADM)

ID	Title	Priority	Source
ADM-001	Secure JWT Endpoints with Backend Token	Critical	TODO
ADM-002	Suspend and Delete Users	High	Partial
ADM-003	Platform-wide Audit Logging	High	New
ADM-004	Customize Email Templates	Medium	New
ADM-005	Security Monitoring Dashboard	Medium	New
ADM-006	Impersonate Users for Support	Low	New
ADM-007	Manage JWT Blocklist	Medium	Enhance
ADM-008	Manage Global Apps	High	In Development

Priority Summary

Priority	Count	Stories
Critical	3	EU-002, ORG-002, ADM-001
High	12	EU-001, EU-004, ORG-001, ORG-003, ORG-006, ORG-009, DEV-001, DEV-002, DEV-004, ADM-002, ADM-003, ADM-008
Medium	14	EU-003, EU-005, EU-006, ORG-004, ORG-005, ORG-007, ORG-008, ORG-010, ORG-011, DEV-003, DEV-005, DEV-007, ADM-004, ADM-005, ADM-007
Low	6	EU-007, EU-008, DEV-006, DEV-008, ADM-006

Source Legend

• TODO: Derived from TODO comments in codebase
• Incomplete: Feature exists but implementation is incomplete
• Partial: Infrastructure exists, needs completion
• Enhance: Feature works, could be improved
• New: New feature not currently in codebase

Related Code References

Stories derived from code TODOs reference these files:

• ts/reception/classes.jwt.ts:39
• ts/reception/classes.jwtmanager.ts:40,52
• ts/reception/classes.loginsessionmanager.ts:229-238,256
• ts/reception/classes.billingplan.ts:16
• ts_idpclient/classes.idpclient.ts:30