marchon/master-zapier-plan-draft
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
master-zapier-plan-draft/packages/verae-access-web
History
George Lambert 2bb3884a1b
Some checks are pending
offline / test (push) Waiting to run
Details
Close remaining IAM JSON doors and re-walk the lab. 
CS/sales/accounting/staff list endpoints and sales pricing writes
require IAM; fleet service env sets STAFF_AUTH=1. Department tests
use a private books file so lab NATS does not leak into them.
2026-09-11 19:08:20 -04:00
..
src Turn lab IAM on, move portal to access-web, harden sessions and receipts. 2026-09-11 18:59:18 -04:00
test Close remaining IAM JSON doors and re-walk the lab. 2026-09-11 19:08:20 -04:00
NATS.md Separate Zapier, web, API, and leaf access planes with NATS authz 2026-09-11 16:05:05 -04:00
package-lock.json Separate Zapier, web, API, and leaf access planes with NATS authz 2026-09-11 16:05:05 -04:00
package.json Separate Zapier, web, API, and leaf access planes with NATS authz 2026-09-11 16:05:05 -04:00
README.md Turn lab IAM on, move portal to access-web, harden sessions and receipts. 2026-09-11 18:59:18 -04:00

README.md

verae-access-web

Direct web access plane. Customer browsers hit this process, not Zapier and not the NATS port.

Forgejo: https://git.georgelambert.org/marchon/verae-access-web

Every NATS hop is verae.access.web.* → verae.access.authz.check → internal verae.billing.statement.get (reload only, not CS credits).

Route Job
GET /health { plane: "web" }
GET /portal/ Customer portal (static)
* /portal/api/* Proxy to loopback zappier-edge
GET /statement/:id Authz then statement
POST /reload Authz then balance.adjust kind=reload

Port :3021. Customer portal (public door): http://0.0.0.0:3021/portal/ — static from packages/zappier/portal, /portal/api proxied to loopback zappier-edge. Edge itself stays on 127.0.0.1:3000.