mosaicstack/stack
1
0
Fork 0
Code Issues 13 Pull Requests Actions Packages Projects Releases 11 Wiki Activity

docs(plan): gateway admin token recovery flow #401

Merged
jason.woltje merged 1 commits from docs/gateway-token-recovery-plan into main 2026-04-05 05:11:34 +00:00
Conversation 0 Commits 1 Files Changed 1 +193
jason.woltje commented 2026-04-05 05:06:09 +00:00
Owner
Copy Link

Plan document for mission cli-unification-20260404 task CU-03-01.

Captures the BetterAuth cookie-based admin token recovery design locked in Session 1: mosaic gateway login persists a session cookie, and mosaic gateway config recover-token / rotate-token reuse the existing POST /api/admin/tokens endpoint (no new server endpoints required — AdminGuard already accepts BetterAuth session cookies).

Sections: problem statement, design summary, surface contract (server + CLI commands + file touch list), installer fix preview for CU-03-06, test strategy for CU-03-07, and risks. Feasibility confirmed during investigation — AdminGuard.validateSession reads cookies via fromNodeHeaders.

Planning only — no runtime code changes.

Plan document for mission cli-unification-20260404 task CU-03-01. Captures the BetterAuth cookie-based admin token recovery design locked in Session 1: mosaic gateway login persists a session cookie, and mosaic gateway config recover-token / rotate-token reuse the existing POST /api/admin/tokens endpoint (no new server endpoints required — AdminGuard already accepts BetterAuth session cookies). Sections: problem statement, design summary, surface contract (server + CLI commands + file touch list), installer fix preview for CU-03-06, test strategy for CU-03-07, and risks. Feasibility confirmed during investigation — AdminGuard.validateSession reads cookies via fromNodeHeaders. Planning only — no runtime code changes.
jason.woltje added 1 commit 2026-04-05 05:06:10 +00:00
docs(plan): gateway admin token recovery flow
All checks were successful
ci/woodpecker/push/ci Pipeline was successful
Details
ci/woodpecker/pr/ci Pipeline was successful
Details
37545de79c
jason.woltje merged commit 651426cf2e into main 2026-04-05 05:11:34 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jason.woltje
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#401
Delete Branch "docs/gateway-token-recovery-plan"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?