# Sign-in methods

A step of the [Cloud application](https://gradus.kazet.blog/tree/cloud-application) tree on Gradus, in the Security area: Secrets, auth, TLS, input.

Page: https://gradus.kazet.blog/tree/cloud-application/step/sign-in-methods

Show how an account can sign in and let users link and unlink methods, never removing the last one.

Usually comes after: [Settings page](https://gradus.kazet.blog/tree/cloud-application/step/settings-page).

## Prompt for your AI assistant

```
Read the sign-in decision record in docs/decisions and the identities model. In settings, list each sign-in method with its provider, address and the date it was linked. Linking starts from a signed-in session after a fresh sign-in, so nobody can attach their own account to someone else's. Unlinking asks for a fresh sign-in too and refuses to remove the last method. For own passwords, let the user set or change a password here and end their other sessions after a change. Refuse an identity already tied to another user and never merge the two. On a hosted provider, use its linking API. Email the account whenever a method is added or removed, and add a test for each of these rules.
```

Every step of the tree: https://gradus.kazet.blog/tree/cloud-application/llms.txt