User Registration & Profile

Registration begins at any tenant entry point — federation site, club portal, or marketing landing — and routes through the Craft-Easy auth identity service. Users either self-register with email/phone verification or initiate OAuth2 with Google, Microsoft, or GitHub; in both flows the system creates a single auth identity that can later carry multiple tenant-scoped profiles. Once verified, the user is prompted to complete a role-aware profile: PlayerProfile captures name, date of birth, nationality, photo and preferred playing position (pointer/shooter/middle); OfficialProfile records umpire grade, certifications and spoken languages; AdministratorProfile records federation, role and mandate period.

Multi-identity support lets the same person hold all three at once — a club secretary who plays in the regional league and umpires on weekends keeps one login and three profile documents, each linked to the appropriate OrgNode and tenant. Photo uploads route through the media pipeline with automatic resizing and content moderation. A profile-completion service computes a percentage and surfaces missing fields in the user's dashboard, prompting players to add a photo before their first competition or coaches to upload certifications before the next training cycle.

ID-card generation produces both a digital wallet-compatible card and a printable PDF, embedding a signed QR payload that resolves to the player's tenant + license number; the same QR is used by tournament check-in scanners and by venue access control. GDPR rights — data export and deletion request — are exposed under /me as standard endpoints; deletion uses the platform-wide 30-day grace window before anonymisation cascades through results, rankings, and audit references.