julian.kiedaischandClaude Opus 5.5
5ded84cb33
Server F checks the dashboard's entry ticket as itsdangerous does (tools/ticket-oracle: tickets made by itsdangerous 2.2.0 itself), redeems it at /__auth for a session cookie (only the key's SHA-256 is kept) and decides at /sync by the session's grant: none, read or write; a frozen project is read by everyone; every refusal names its reason (one list in packages/protocol/src/sync.ts). A WebSocket from a page of another origin is refused. /svc/* with the service key makes, deletes, freezes and thaws projects, ends a person's grant or all their sessions (connections let go) and lists the sessions. Snapshots, restoring and copying move to F6 (they need the canonical doc.json and an epoch). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
17 lines
657 B
Bash
Executable File
17 lines
657 B
Bash
Executable File
#!/bin/sh
|
|
# Writes packages/server/test/tickets.python.json: the dashboard's entry
|
|
# tickets as itsdangerous makes and reads them (plan §8.5). Needs Python 3;
|
|
# itsdangerous comes in the dashboard's version into a venv of its own.
|
|
set -eu
|
|
here="$(cd "$(dirname "$0")" && pwd)"
|
|
root="$(cd "$here/../.." && pwd)"
|
|
if [ ! -x "$here/.venv/bin/python" ]; then
|
|
python3 -m venv "$here/.venv"
|
|
"$here/.venv/bin/pip" install -q itsdangerous==2.2.0
|
|
fi
|
|
out="$root/packages/server/test/tickets.python.json"
|
|
# Removed first: a crashed run must not leave the previous result standing.
|
|
rm -f "$out"
|
|
"$here/.venv/bin/python" "$here/tickets.py" "$out"
|
|
test -s "$out"
|