docs(auth): address authentication guide review

2026-08-18 03:33:00 +02:00
parent f4f38717e1
commit 91925d64bf
12 changed files with 406 additions and 142 deletions
@@ -3,7 +3,9 @@
 Server authentication uses generic OIDC with the reverse proxy preserving the configured public
 origin and callback path. Follow the [OIDC guide](authentication-oidc.md), [Authentik guide](authentik.md)
 when applicable, and the [authentication acceptance matrix](../testing/authentication-manual-acceptance.md).
-The host authentication CLI is tht; use tht auth check before workspace Validate/Test.
+The host authentication CLI is `tht`: Workspace Validate is static, `tht auth check` is live and
+non-interactive, `--interactive` adds device-flow identity validation, and Workspace Test is the
+aggregate live gate.

 This guide is for an installer with basic Linux administration and very basic Docker knowledge.
 It deploys the same Compose distribution used on a local PC: the mandatory application is exactly