George Lambert
c32b65038a
Some checks are pending
offline / test (push) Waiting to run
Fleet and department doors now check STAFF_IAM_URL. Walkthrough: cs can credit (agent is the IAM user) and cannot export; operator can fleet POST; admin /me is owner. Portal is the public web door at :3021/portal/. IAM sessions persist; login is rate-limited per user; receipt PDF is branded. lan-134 stays disabled.
17 lines
825 B
Markdown
17 lines
825 B
Markdown
# verae-access-web
|
|
|
|
**Direct web** access plane. Customer browsers hit this process, not Zapier and not the NATS port.
|
|
|
|
**Forgejo:** https://git.georgelambert.org/marchon/verae-access-web
|
|
|
|
Every NATS hop is `verae.access.web.*` → `verae.access.authz.check` → internal `verae.billing.statement.get` (reload only, not CS credits).
|
|
|
|
| Route | Job |
|
|
|-------|-----|
|
|
| `GET /health` | `{ plane: "web" }` |
|
|
| `GET /portal/` | Customer portal (static) |
|
|
| `*` `/portal/api/*` | Proxy to loopback zappier-edge |
|
|
| `GET /statement/:id` | Authz then statement |
|
|
| `POST /reload` | Authz then `balance.adjust` kind=reload |
|
|
|
|
Port `:3021`. Customer portal (public door): **http://0.0.0.0:3021/portal/** — static from `packages/zappier/portal`, `/portal/api` proxied to loopback zappier-edge. Edge itself stays on `127.0.0.1:3000`.
|