Skip to content

fix: bind admin OAuth to helper application #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
Rexy40407 wants to merge 1 commit into
base: migration/vozen-rust
Choose a base branch
from
Draft

fix: bind admin OAuth to helper application #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .env.rust.prod.example
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,11 @@ RUST_OWNER_COMMANDS_ENABLED=true
RUST_BROWSER_API_ENABLED=true
RUST_DASHBOARD_ENABLED=true
RUST_ADMIN_API_ENABLED=true
# The owner console lives in the Vozen Helper GitHub Pages repo and signs in
# through that Discord application. Keep this explicit: falling back to CLIENT_ID
# binds admin login to the Vozen bot application and rejects every Helper OAuth token.
ADMIN_CLIENT_ID=1526211106081734666
ADMIN_PANEL_ORIGIN=https://rexy40407.github.io

# Rust serves the existing reverse-proxy/API port after Node is stopped.
HEALTH_PORT=3001
Expand Down
7 changes: 7 additions & 0 deletions site-tests/operationalHardening.test.mjs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,13 @@ describe('operational security configuration', () => {
expect(deploy).toContain('Missing VPS_SSH_KEY');
expect(deploy).toContain('debug: true');
});
it('binds the owner console to the Helper OAuth application in production', () => {
const productionEnv = source('.env.rust.prod.example');
expect(productionEnv).toContain('ADMIN_CLIENT_ID=1526211106081734666');
expect(productionEnv).toContain(
'ADMIN_PANEL_ORIGIN=https://rexy40407.github.io',
);
});
it('keeps the Night Signal treatment scoped to Discord entry points', () => {
const css = source(SITE_CSS);
const index = source('site/index.html');
Expand Down