George Lambert
1b199ca4d4
Some checks are pending
offline / test (push) Waiting to run
Zapier is one ingress. Direct web, customer API, and S2S leaf nodes are their own services. Every hop to an internal subject must pass verae.access.authz.check (default deny by plane).
15 lines
529 B
Markdown
15 lines
529 B
Markdown
# verae-access-web
|
|
|
|
**Direct web** access plane. Customer browsers hit this process, not Zapier and not the NATS port.
|
|
|
|
**Forgejo:** https://git.georgelambert.org/marchon/verae-access-web
|
|
|
|
Every NATS hop is `verae.access.web.*` → `verae.access.authz.check` → internal `verae.billing.statement.get` (reload only, not CS credits).
|
|
|
|
| Route | Job |
|
|
|-------|-----|
|
|
| `GET /health` | `{ plane: "web" }` |
|
|
| `GET /statement/:id` | Authz then statement |
|
|
| `POST /reload` | Authz then `balance.adjust` kind=reload |
|
|
|
|
Port `:3021`.
|