Skip to content

stack: JWT usage + portal + Path A bootstrap (working copy of #89) - #91

Closed
eliteprox wants to merge 5 commits into
stack/admin-usage-boundaryfrom
stack/jwt-scoped-usage
Closed

stack: JWT usage + portal + Path A bootstrap (working copy of #89)#91
eliteprox wants to merge 5 commits into
stack/admin-usage-boundaryfrom
stack/jwt-scoped-usage

Conversation

@eliteprox

Copy link
Copy Markdown
Collaborator

Summary

  • Working copy of #89 on stack/jwt-scoped-usage, stacked on stack/admin-usage-boundary (#90).
  • #89 remains open as the frozen review snapshot (feat/jwt-scoped-usage / backup/feat-jwt-scoped-usage at 1ed69f8). This branch is the only place we push fixups.
  • Includes JWT-scoped usage, Dev Portal Auth0 edge, CORS, one-command bootstrap, Path A sandbox/Stripe billing → openmeter-billing.json / sdk-config.json, plus golden testdata/sdk-config.golden.json (5c2e7ad).

Relationship to other PRs

Test plan

Shrink public usage to Bearer JWT/sk_* self-serve reads, drop access/grants,
query OpenMeter by client_id dimensions with actor match filtering, and
document Auth0 DCR + Kong OIDC gateway for the usage surface only.
- Added CORS configuration options to allow specific origins and support Kong Dev Portals.
- Updated OpenAPI documentation to reflect the new Railway builder-api URL and clarify usage instructions.
- Enhanced the bootstrap script for provisioning Auth0 DCR and related strategies.
- Introduced tests for CORS functionality to ensure proper handling of preflight requests and origin validation.
…mer handling

- Modified the `.env.example` file to reflect new default plan and trial feature keys for OpenMeter.
- Introduced a new Dockerfile for the identity webhook service to streamline deployment.
- Enhanced the customer handling logic in the builder API to support exact key matching and improved subscription access checks.
- Updated documentation to clarify the usage of new hosts and CORS configurations.
- Added tests for customer management to ensure robust handling of edge cases.
…ter provisioning

- Added a new `bootstrap.sh` script to streamline the provisioning of Auth0 clients and OpenMeter billing profiles.
- Updated `.env.example` to include new environment variables for Stripe billing integration.
- Enhanced `.gitignore` to exclude generated bootstrap artifacts.
- Updated `README.md` with usage instructions for the new bootstrap command and its flags.
- Introduced a GitHub Actions workflow for shellcheck and regression testing of the bootstrap script.
- Added tests to ensure the integrity of the `sdk-config.json` output.
@eliteprox eliteprox closed this Aug 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant