offline / test (push) Waiting to run

Details

Close remaining IAM JSON doors and re-walk the lab.

CS/sales/accounting/staff list endpoints and sales pricing writes
require IAM; fleet service env sets STAFF_AUTH=1. Department tests
use a private books file so lab NATS does not leak into them.

2026-09-11 19:08:20 -04:00

845 B

Raw Blame History

Open todos

Live api.veraetime.net with MOCK_VERAE=false and admin bind credentials.
NATS nkeys/mTLS on a real three-node cluster (accounts file is the lab stand-in).
Exclusive JetStream consumer for verae.zapier.jobs.events on verae-jobs-events (JOBS_EVENTS_EXCLUSIVE=1; middleware skips the router).
Auth on CS/sales/accounting HTML via verae-staff-session (STAFF_AUTH=1).
Staff IAM: named users, roles, permissions (verae-staff-iam :3028).
Zapier Platform push of a private app.
Move portal static files fully into verae-access-web (/portal/ public door; API proxied to loopback edge).
Turn IAM on for the running lab (fleet STAFF_IAM_URL + restart).
IAM hardening: JSON sessions, login rate-limit, JSON 401 as well as HTML 302, credit principal = IAM username.

845 B Raw Blame History

Open todos

845 B

Raw Blame History