Admit authenticated Binjovi service workspace reads #61

Merged

binjovi-bot merged 1 commit from feat/binjovi-services-browser-route into trunk

2026-09-06 04:54:52 +00:00

sean commented

2026-09-06 04:52:49 +00:00

Owner

Expose the new /services browser workspace through one exact GET/HEAD rule. It accepts the same cookie or service JWT identity as the dashboard and signs the upstream identity. Existing asset, API read, and service command rules cover the workspace requests.

Validation: route guard failed before the new rule, then the full Ory contract suite passed. Guards require signed reads and reject anonymous access or page mutation methods. Companion Binjovi PR787 adds the page, inventory, history, and editor.

Expose the new `/services` browser workspace through one exact GET/HEAD rule. It accepts the same cookie or service JWT identity as the dashboard and signs the upstream identity. Existing asset, API read, and service command rules cover the workspace requests. Validation: route guard failed before the new rule, then the full Ory contract suite passed. Guards require signed reads and reject anonymous access or page mutation methods. Companion Binjovi PR787 adds the page, inventory, history, and editor.

sean added 1 commit

2026-09-06 04:52:50 +00:00