Commit Graph

9 Commits

Author SHA1 Message Date
phamnazage-jpg
4e2ee087fd feat(vNext.4): implement trusted-subject security chain for portal user key self-service
- Add portal_auth.go: Portal user session auth with HMAC-signed cookies
- Add /api/portal/session/{login,logout,state} endpoints
- Update nginx config template: cookie-to-header trusted proxy pattern
- Update frontend: sync CRM session on login/logout
- Add TRUSTED_SUBJECT_DEPLOY_GUIDE.md with remote43 deployment steps
- Update EXECUTION_BOARD.md: mark trusted-subject blocking issue as resolved

This implements the secure chain:
  Browser → Portal → nginx (cookie→header) → CRM (verify proxy secret)

Required remote43 actions:
1. Generate 64-char hex secret
2. Update .env.crm with TRUSTED_* config
3. Update nginx with cookie map and header injection
4. Restart services

Fixes EXECUTION_BOARD.md 2026-06-08 blocking issue
2026-06-09 07:48:03 +08:00
phamnazage-jpg
dbbb313a36 feat: close v3 governance evidence and slo metrics wiring
Some checks failed
CI / Build & Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
CI / Security Scan (push) Has been cancelled
CI / Docker Build (push) Has been cancelled
CI / Release (push) Has been cancelled
2026-06-08 13:59:03 +08:00
phamnazage-jpg
77b7f7f660 feat: harden runtime import and frontend verification workflows
Some checks failed
CI / Build & Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
CI / Security Scan (push) Has been cancelled
CI / Docker Build (push) Has been cancelled
CI / Release (push) Has been cancelled
2026-06-04 20:02:36 +08:00
phamnazage-jpg
c982c595b8 feat(accounts): add provider account admin view 2026-05-29 15:50:28 +08:00
phamnazage-jpg
2896e62071 feat(routing): add route health admin view 2026-05-29 13:37:43 +08:00
phamnazage-jpg
2e9b4ab988 feat(portal): add logical group admin page 2026-05-29 13:06:19 +08:00
phamnazage-jpg
8d7aa925df feat(admin): persist provider drafts in crm 2026-05-27 21:49:12 +08:00
phamnazage-jpg
ebd86a4256 feat(batch): add live reuse admin verification flow 2026-05-27 20:23:42 +08:00
phamnazage-jpg
02580cda0b feat: organize scripts and add portal validation assets 2026-05-27 09:39:05 +08:00