saqib mirandClaude Sonnet 5
40687f68fa
Replaces the no-op fastify.authenticate stub and the never-implemented
identity/auth login with real bcrypt password verification, JWT session
issuance/verification (reusing the existing JWT_SECRET), and a Redis-backed
revocation denylist for logout. Adds requireRole('ADMIN') to admin-only
configuration writes across 002-009 that previously relied on a decorator
that never actually checked anything. Adds self-identity (GET /auth/me,
re-validated against live account state) and admin-provisioned accounts
(POST /admin/users).
Making the auth check genuinely reject invalid/missing tokens exposed that
~18 pre-existing integration test files called already-gated routes with no
Authorization header (safe against the old no-op stub, broken against a real
one) — fixed via a shared tests/helpers/auth.ts (loginAs/authHeader) and a
file-by-file pass, plus two related SLA-run cleanup races exposed once admin
setup calls in those files' own beforeAll blocks started actually succeeding.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
21 lines
920 B
SQL
21 lines
920 B
SQL
-- AlterTable
|
|
ALTER TABLE "agents" ADD COLUMN "userId" TEXT;
|
|
|
|
-- AlterTable
|
|
ALTER TABLE "users" ADD COLUMN "active" BOOLEAN NOT NULL DEFAULT true,
|
|
ADD COLUMN "passwordHash" TEXT NOT NULL DEFAULT '';
|
|
|
|
-- The default above exists only to satisfy the NOT NULL constraint against this (empty)
|
|
-- table at migration time — application code always provides a real bcryptjs hash on every
|
|
-- User row it creates (specs/010-identity-auth/data-model.md), so the default itself is
|
|
-- dropped immediately below to keep schema.prisma and the live database in agreement (no
|
|
-- default declared in the Prisma schema).
|
|
ALTER TABLE "users" ALTER COLUMN "passwordHash" DROP DEFAULT;
|
|
|
|
-- CreateIndex
|
|
CREATE UNIQUE INDEX "agents_userId_key" ON "agents"("userId");
|
|
|
|
-- AddForeignKey
|
|
ALTER TABLE "agents" ADD CONSTRAINT "agents_userId_fkey" FOREIGN KEY ("userId") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
|
|
|