Implement Dashboard Authentication #17

Closed
opened 2026-04-26 15:22:31 -04:00 by dohertj2 · 2 comments
Owner

Source: $file
Milestone: $currentMilestone

Labels: area:dashboard, area:auth, type:feature, priority:p1

Deliverables:

  • /dashboard/login,
  • API-key validation with admin scope,
  • HTTP-only secure cookie,
  • logout,
  • anti-forgery protection,
  • optional explicit anonymous-localhost dev mode defaulting false.

Acceptance criteria:

  • unauthenticated access is denied/redirected,
  • non-admin key is denied,
  • admin key logs in,
  • cookies use secure settings,
  • API keys never appear in query strings or logs.

Tests:

  • auth decisions,
  • non-admin denial,
  • cookie properties,
  • redaction.
Source: $file Milestone: $currentMilestone Labels: `area:dashboard`, `area:auth`, `type:feature`, `priority:p1` Deliverables: - `/dashboard/login`, - API-key validation with `admin` scope, - HTTP-only secure cookie, - logout, - anti-forgery protection, - optional explicit anonymous-localhost dev mode defaulting false. Acceptance criteria: - unauthenticated access is denied/redirected, - non-admin key is denied, - admin key logs in, - cookies use secure settings, - API keys never appear in query strings or logs. Tests: - auth decisions, - non-admin denial, - cookie properties, - redaction.
dohertj2 added this to the gateway-grpc-events-dashboard milestone 2026-04-26 15:22:31 -04:00
dohertj2 added the area:dashboardarea:authtype:featurepriority:p1 labels 2026-04-26 15:22:31 -04:00
dohertj2 added a new dependency 2026-04-26 15:28:35 -04:00
dohertj2 added a new dependency 2026-04-26 15:28:35 -04:00
dohertj2 added a new dependency 2026-04-26 15:28:35 -04:00
Author
Owner

Worker 1 is taking this issue. Branch: agent-1/issue-17-implement-dashboard-authentication. Worktree: C:\Users\dohertj2\Desktop\mxaccessgw-agent-1.

Worker 1 is taking this issue. Branch: agent-1/issue-17-implement-dashboard-authentication. Worktree: C:\Users\dohertj2\Desktop\mxaccessgw-agent-1.
Author
Owner

Verified and merged by orchestrator in PR #76.

Commit: ff86b3f9077f406963b19054a55c0d9465387b4f
Merge/update commit on branch: 2e4ba111d3eaa356d6cdb4f6644528e7228db57f
Merge commit: ed1018c3bb
Branch: agent-1/issue-17-implement-dashboard-authentication

Independent verification:

  • dotnet build src\MxGateway.sln
  • dotnet test src\MxGateway.Tests\MxGateway.Tests.csproj --no-build --filter FullyQualifiedName~Gateway
  • dotnet test src\MxGateway.sln --no-build

Result: all tests passed (150 gateway-focused tests; full suite 1 integration, 150 gateway, 78 worker).

Verified and merged by orchestrator in PR #76. Commit: ff86b3f9077f406963b19054a55c0d9465387b4f Merge/update commit on branch: 2e4ba111d3eaa356d6cdb4f6644528e7228db57f Merge commit: ed1018c3bb5459d7444fb3e73b61e057c3b5f5e8 Branch: agent-1/issue-17-implement-dashboard-authentication Independent verification: - dotnet build src\MxGateway.sln - dotnet test src\MxGateway.Tests\MxGateway.Tests.csproj --no-build --filter FullyQualifiedName~Gateway - dotnet test src\MxGateway.sln --no-build Result: all tests passed (150 gateway-focused tests; full suite 1 integration, 150 gateway, 78 worker).
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Reference: dohertj2/mxaccessgw#17