marchon/verae-staff-iam
Watch
1
0
Fork
You've already forked verae-staff-iam
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Internal staff users, roles, and permissions
2 commits 5 branches 0 tags 500 KiB
  • JavaScript 67.4%
  • HTML 32.6%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
George Lambert a341a1e187 docs: bring README.md in line with Standard Readme
2026-09-22 09:58:35 -04:00
public Initial import of verae-staff-iam from zapier monorepo 2026-09-11 19:55:17 -04:00
src Initial import of verae-staff-iam from zapier monorepo 2026-09-11 19:55:17 -04:00
test Initial import of verae-staff-iam from zapier monorepo 2026-09-11 19:55:17 -04:00
NATS.md Initial import of verae-staff-iam from zapier monorepo 2026-09-11 19:55:17 -04:00
package.json Initial import of verae-staff-iam from zapier monorepo 2026-09-11 19:55:17 -04:00
README.md docs: bring README.md in line with Standard Readme 2026-09-22 09:58:35 -04:00
SUMMARY.md Initial import of verae-staff-iam from zapier monorepo 2026-09-11 19:55:17 -04:00

README.md

verae-staff-iam

standard-readme compliant

Named internal staff accounts with roles and permissions. Source of truth for who may use CS, sales,...

Forgejo: https://git.georgelambert.org/marchon/verae-staff-iam

Port :3028. UI: sign-in, people, roles, audit.

Seed lab users

Username Password Roles
admin admin-dev-key owner (all)
cs cs-dev-key cs
sales sales-dev-key sales
accounting acct-dev-key accounting
operator fleet-dev-key operator

Override with IAM_OWNER_PASSWORD, IAM_CS_PASSWORD, etc. Persist: STAFF_IAM_PATH (users, audit, sessions). Login is rate-limited (8 failures / 10 minutes / IP+username). JSON APIs return 401/403; HTML doors 302 to /login.

Wire other doors

STAFF_IAM_URL=http://127.0.0.1:3028
STAFF_AUTH=1   # department HTML still redirects if check fails

GET /check?permission=cs.credit — cookie or Authorization: Bearer. Cookie name remains staff_session. Multi-host: STAFF_COOKIE_DOMAIN.

Roles

owner, iam-admin, billing-admin, cs, sales, accounting, operator, viewer. Permissions are listed on /roles.

Install

git clone ssh://git@git.georgelambert.org:2223/marchon/verae-staff-iam.git
cd verae-staff-iam

Usage

npm install
npm start

Contributing

Questions: open an issue at https://git.georgelambert.org/marchon/verae-staff-iam/issues. Pull requests are accepted.

License

UNLICENSED © George Lambert