Lesson 30 — Working across organizations
Goal: by the end of this lesson you'll know where your
editor lives on a graphden cloud, how to belong to more than one
organization, and how to move between them. It's the companion to
lesson 27 (Apps): apps live on graphden.app, and
this lesson is about the other domain — where you sign in and
edit.
Concepts introduced: the per-org editor subdomain
(<org>.graphden.dev), per-origin sessions, the org
switcher, and how the apex landing routes a first-time sign-in.
This follows on from lesson 33 (Signing up & signing in) — you have an account and an org.
Your org has its own editor address
On a graphden cloud, your organization's editor lives at its own subdomain:
https://<org>.graphden.dev
So the acme org edits at acme.graphden.dev. That's the URL you
sign in at and work from. It's the mirror image of Lesson 27: the
graphden.dev zone is for editors (one subdomain per org),
graphden.app is for apps — kept apart so your public app code
never shares an origin with your editor session.
If you only belong to one org, that's the whole story: bookmark
<org>.graphden.dev and go.
First sign-in: the landing
If you don't yet know your org's subdomain — a brand-new visitor —
start at the apex, graphden.dev (the landing), and use its
Sign in. Once you authenticate, graphden knows which org(s)
you belong to and sends you to your <org>.graphden.dev. Signing
up for a new org (Lesson 33) lands you
in that org's editor the same way.
Per-origin sessions
Because each org's editor is its own subdomain — its own origin
— it has its own session. Your login at acme.graphden.dev is
stored only for that origin; it grants no access on
beta.graphden.dev. This is the Slack-workspace model: separate
spaces, separate sessions.
The upside is isolation: one org's session can never read another org's data through your browser, even if you're a member of both. The trade-off is that belonging to two orgs means signing in on two subdomains — which is exactly what the switcher is for.
The org chip
The editor's top bar shows an org chip with the current org's
name — always, even when you belong to just one. The org is the
outermost context you write into (org → branch → workspace), so it
stays readable at a glance. Open the chip and you'll see every org
you belong to, each with an owner badge where you own it and
its plan. Picking another one navigates to that org's
<org>.graphden.dev — its own origin, where you sign in (or
already have a session). It doesn't try to carry your current
session across; per-origin isolation means each org gets its own
sign-in.
How do you get a second org? Two ways.
- Someone in another org grants your account a capability in it (lesson 25 — Grants); membership is exactly "holds a grant in that org," so the moment you're granted something there, it appears in the chip.
- You make one: New organization… at the bottom of the chip's list takes a name — lowercase letters, digits and hyphens, 3–40 characters; it becomes the org's editor address — and makes you its owner and admin. The new org starts on the free plan. A verified email is required, and an account may own a handful of orgs (the operator sets the cap).
Signing up again is not a way: signup only ever makes another account (Lesson 33).
Where each thing lives — the whole map
| Address | What it is |
|---|---|
graphden.dev |
the landing + first-time sign-in |
<org>.graphden.dev |
that org's editor + login |
<label>.graphden.app |
one of the org's apps (Lesson 27) |
| your own domain | a custom domain pointed at an app |
Two graphden-owned domains, each a single flat level — editors on
one, apps on the other. Nothing is nested, and adding an org or an
app never needs any DNS change on graphden's side.
Recap
- Your org's editor is
<org>.graphden.dev; the apexgraphden.devis the landing + the front door for a first sign-in. - Each org's editor is its own origin with its own session (Slack-workspace isolation).
- The org chip always names where you are and navigates you to another org's subdomain; you gain membership by being granted something in that org, or you create one yourself from the chip.
- Editors on
graphden.dev, apps ongraphden.app— kept apart on purpose.
This closes the domain model: Lesson 27 put your fns on the web as apps; this lesson placed you — the editor — on it.