724 B
724 B
name, description, metadata
| name | description | metadata |
|---|---|---|
| shd-auth-profile | Use when the user asks to inspect or update the authenticated SHD profile or unlink the authenticated OIDC profile. | modules=auth-profile |
SHD authenticated profile
- Read
shd://meor callshd_get_current_userbefore changing profile data. - Update only safe fields explicitly requested by the user. Email, password, sessions, recovery data, access flags and tokens are outside this workflow.
- Unlink OIDC only on an explicit request and only after the server confirms that another sign-in method remains available. Preserve concurrency values, idempotency and the server readback.
- Never expose OIDC subjects, credentials, tokens or recovery information.