T

saqib mirandClaude Sonnet 5 40687f68fa feat(010-identity-auth): real staff login, session verification, and role gating

Replaces the no-op fastify.authenticate stub and the never-implemented
identity/auth login with real bcrypt password verification, JWT session
issuance/verification (reusing the existing JWT_SECRET), and a Redis-backed
revocation denylist for logout. Adds requireRole('ADMIN') to admin-only
configuration writes across 002-009 that previously relied on a decorator
that never actually checked anything. Adds self-identity (GET /auth/me,
re-validated against live account state) and admin-provisioned accounts
(POST /admin/users).

Making the auth check genuinely reject invalid/missing tokens exposed that
~18 pre-existing integration test files called already-gated routes with no
Authorization header (safe against the old no-op stub, broken against a real
one) — fixed via a shared tests/helpers/auth.ts (loginAs/authHeader) and a
file-by-file pass, plus two related SLA-run cleanup races exposed once admin
setup calls in those files' own beforeAll blocks started actually succeeding.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-07 12:45:37 +05:30

.claude/skills

chore: install GitHub Spec Kit tooling

2026-08-21 16:22:13 +05:30

.husky

first commit

2026-08-19 16:29:17 +05:30

.specify

chore: install GitHub Spec Kit tooling

2026-08-21 16:22:13 +05:30

docs

docs: add architect's additions doc (gaps & recommendations)

2026-08-21 17:35:32 +05:30

prisma

feat(010-identity-auth): real staff login, session verification, and role gating

2026-09-07 12:45:37 +05:30

scripts

first commit

2026-08-19 16:29:17 +05:30

specs

feat(010-identity-auth): real staff login, session verification, and role gating

2026-09-07 12:45:37 +05:30

src

feat(010-identity-auth): real staff login, session verification, and role gating

2026-09-07 12:45:37 +05:30

tests

feat(010-identity-auth): real staff login, session verification, and role gating

2026-09-07 12:45:37 +05:30

.dockerignore

first commit

2026-08-19 16:29:17 +05:30

.editorconfig

first commit

2026-08-19 16:29:17 +05:30

.env.example

feat: implement AI support agent (005) — diagnosis, tools, runbooks, verification

2026-09-02 17:44:52 +05:30

.env.test

fix: stop tracking .env files with committed secrets

2026-08-21 16:10:32 +05:30

.gitattributes

first commit

2026-08-19 16:29:17 +05:30

.gitignore

fix: stop tracking .env files with committed secrets

2026-08-21 16:10:32 +05:30

CONTRIBUTING.md

first commit

2026-08-19 16:29:17 +05:30

docker-compose.development.yml

have add tthe port number

2026-09-03 16:40:19 +05:30

docker-compose.prod.yml

first commit

2026-08-19 16:29:17 +05:30

docker-compose.test.yml

have add tthe port number

2026-09-03 16:40:19 +05:30

Dockerfile

update docker dependency issue

2026-08-20 11:27:15 +05:30

eslint.config.js

first commit

2026-08-19 16:29:17 +05:30

lint-staged.config.js

first commit

2026-08-19 16:29:17 +05:30

package-lock.json

feat(010-identity-auth): real staff login, session verification, and role gating

2026-09-07 12:45:37 +05:30

package.json

feat(010-identity-auth): real staff login, session verification, and role gating

2026-09-07 12:45:37 +05:30

prettier.config.js

first commit

2026-08-19 16:29:17 +05:30

README.md

fix

2026-09-03 16:48:27 +05:30

tsconfig.build.json

first commit

2026-08-19 16:29:17 +05:30

tsconfig.json

first commit

2026-08-19 16:29:17 +05:30

vitest.config.ts

feat: implement SLA and escalation (008)

2026-09-03 13:02:05 +05:30

README.md

SupportHub API

Development (Docker)

Start all services: docker compose --env-file .env.development -f docker-compose.development.yml up -d --build
Start only database & cache (for local app development): docker compose --env-file .env.development -f docker-compose.development.yml up -d postgres redis

Test (Docker)

docker compose --env-file .env.test -f docker-compose.test.yml up --build

Production (Docker)

docker compose --env-file .env.prod -f docker-compose.prod.yml up --build -d

Stop / Down

Stop production: docker compose -f docker-compose.prod.yml down
Stop development: docker compose -f docker-compose.development.yml down
Stop development & wipe volumes: docker compose --env-file .env.development -f docker-compose.development.yml down -v

List Containers & Logs

List containers: docker compose --env-file .env.development -f docker-compose.development.yml ps
Follow logs: docker compose --env-file .env.development -f docker-compose.development.yml logs -f

Local Development (Host)

Start database & cache in Docker:

docker compose --env-file .env.development -f docker-compose.development.yml up -d postgres redis

Start API server in watch mode:
```
npm run dev
```

Database Migrations & Prisma

Generate Prisma Client:
```
npm run prisma:generate
```

Run / Apply Dev Migrations:

npx dotenv-cli -e .env.development -- npm run prisma:migrate

Deploy Migrations (Production/CI):

npx dotenv-cli -e .env.development -- npm run prisma:deploy

Push Schema directly (Sync schema without migration files):
```
npx dotenv-cli -e .env.development -- npx prisma db push
```

Database Seeding

Seed Database (Roles, Products, Categories, Hierarchy & Demo data):
```
npx dotenv-cli -e .env.development -- npm run prisma:seed
```