offline / test (push) Waiting to run

Details

Add internal staff IAM: named users, roles, and management permissions.

verae-staff-iam (:3028) is the people directory — owner, billing-admin,
cs, sales, accounting, operator, viewer — with scrypt passwords, sessions,
and an audit log. Admin console login uses it when STAFF_IAM_URL is set
and hides tabs the account cannot use. CS/sales/accounting/staff/fleet
check permissions such as cs.credit and fleet.operate. Shared staff key
remains only as a fallback when IAM is unset.

2026-09-11 18:36:12 -04:00

646 B

Raw Blame History

Open todos

Live api.veraetime.net with MOCK_VERAE=false and admin bind credentials.
NATS nkeys/mTLS on a real three-node cluster (accounts file is the lab stand-in).
Exclusive JetStream consumer for verae.zapier.jobs.events on verae-jobs-events (JOBS_EVENTS_EXCLUSIVE=1; middleware skips the router).
Auth on CS/sales/accounting HTML via verae-staff-session (STAFF_AUTH=1).
Staff IAM: named users, roles, permissions (verae-staff-iam :3028).
Zapier Platform push of a private app.
Move portal static files fully into verae-access-web (today it proxies /portal to loopback edge).

646 B Raw Blame History

Open todos

646 B

Raw Blame History