mirror of
https://github.com/nestriness/nestri.git
synced 2026-11-03 22:22:39 +02:00
A QR sign-in on Nestri's own hardware proves the Steam account, so `POST /machine/enrolment` from a machine in `FLEET_ORGANISATION_ID` also links it to the person. Hosts somebody brought never link (a machine vouching for itself could attach any Steam account to anyone enrolled on it). A Steam account already linked elsewhere stays there; the report is recorded either way. Tests: three new in `enrolment.test.ts` (fleet links and is idempotent, own host does not link, taken account is left alone). 164 pass.