George Lambert
c32b65038a
Some checks are pending
offline / test (push) Waiting to run
Fleet and department doors now check STAFF_IAM_URL. Walkthrough: cs can credit (agent is the IAM user) and cannot export; operator can fleet POST; admin /me is owner. Portal is the public web door at :3021/portal/. IAM sessions persist; login is rate-limited per user; receipt PDF is branded. lan-134 stays disabled.
9 lines
655 B
Markdown
9 lines
655 B
Markdown
# Open todos
|
|
|
|
- [ ] Live `api.veraetime.net` with `MOCK_VERAE=false` and admin bind credentials.
|
|
- [ ] NATS nkeys/mTLS on a real three-node cluster (accounts file is the lab stand-in).
|
|
- [x] Exclusive JetStream consumer for `verae.zapier.jobs.events` on `verae-jobs-events` (`JOBS_EVENTS_EXCLUSIVE=1`; middleware skips the router).
|
|
- [x] Auth on CS/sales/accounting HTML via `verae-staff-session` (`STAFF_AUTH=1`).
|
|
- [x] Staff IAM: named users, roles, permissions (`verae-staff-iam` :3028).
|
|
- [ ] Zapier Platform `push` of a private app.
|
|
- [x] Move portal static files fully into `verae-access-web` (`/portal/` public door; API proxied to loopback edge).
|