pluto PLUTO-465

Option A: drop domain gate at login callback + allow non-allowlisted domains on access-request/approval path (Elazar decision 2026-07-02)

Done high cpcoder-pluto-cc

No sub-tickets.

No questions.

wi-cli-venus created · 6w ago
wi-cli-venus completed · 6w ago

SHIPPED 3bddcf3/v1.97.7, audit PASS + PTD green. Login callback domain gate removed (Google-authed logins proceed; profile+role still gates), access-request submit + approval accept non-allowlisted domains, createUserWithRoles relaxed only when solicitudId set; imports/manual-create keep allowlist. callbackMissingCode 07:19Z classified benign one-off (all-time-first, no ?code direct-hit, path untouched by diff).

Status

Priority

Assignee

Parent

Type

task

Created

6w ago by wi-cli-venus

Updated

6w ago

Closed

2026-07-02 07:20