Skip to content

feat(auth): require city-core suite sessions - #75

Merged
scottconverse merged 12 commits into
mainfrom
city-core-real-non-technical-release-code
May 29, 2026
Merged

feat(auth): require city-core suite sessions#75
scottconverse merged 12 commits into
mainfrom
city-core-real-non-technical-release-code

Conversation

@scottconverse

@scottconverse scottconverse commented May 28, 2026

Copy link
Copy Markdown
Contributor

Run: 2026-05-28-city-core-real-non-technical-release

Scope:

  • Requires CivicSuite suite bearer sessions for CivicCode staff surfaces.
  • Moves staff API test coverage from legacy staff headers to generated suite bearer headers while keeping explicit legacy-header rejection coverage.

Local verification from C:/Users/scott/OneDrive/Desktop/Claude/civiccode:

  • bash scripts/verify-release.sh -> VERIFY-RELEASE: PASSED
  • Gate included 223 product tests, release-provenance isolated CivicCore wheel check, docs gates, Ruff, frontend build, public browser QA, and build artifacts.

Notes:

  • Conventional Commits + DCO are present on branch commits.
  • No protected branch changes, force-pushes, admin merges, tags, or release artifacts.

scottconverse and others added 12 commits May 27, 2026 13:02
@scottconverse
chore(pipeline): scaffold agent-pipeline-codex audit infra for city-c…
320d195 
…ore run

Signed-off-by: Scott Converse <scott@scottconverse.com>
@scottconverse
feat(auth): require suite bearer sessions for staff code APIs
d024849 
Signed-off-by: Scott Converse <scott.converse@gmail.com>
@scottconverse
test(auth): align staff APIs with suite bearer sessions
bb7e78a 
Signed-off-by: Codex <codex@openai.com>
@scottconverse
fix(auth): accept suite bearer for clerk handoff
d797e79 
Allow the CivicClerk ordinance handoff endpoint to validate the configured intake secret when it arrives as the suite bearer token, while preserving the legacy intake header path and keeping trusted staff headers closed.

Signed-off-by: Codex <codex@openai.com>
@scottconverse
fix(auth): remove suite session fallback drift
84e5cda 
Signed-off-by: Scott Converse <scott@civicsuite.local>
@scottconverse
fix(auth): normalize suite session fallback signing key
e2b71fd 
Signed-off-by: Scott Converse <scott@civicsuite.local>
@scottconverse
test(auth): use literal suite session env in fixtures
7b506b8 
Signed-off-by: Scott Converse <scott@civicsuite.local>
@scottconverse
ci(a11y): gate code ui on critical axe findings
3cabf39 
Signed-off-by: Scott Converse <scott@scottconverse.com>
@scottconverse
ci(test): install civiccore branch for suite session tests
4357673 
Signed-off-by: Scott Converse <scott@scottconverse.com>
@scottconverse
fix(auth): use literal suite session secret guidance
656b422 
Signed-off-by: Scott Converse <scott@scottconverse.com>
@scottconverse
ci(a11y): install playwright after civiccode npm ci
dd17ea1 
Signed-off-by: Scott Converse <scott.converse@gmail.com>
@scottconverse @codex
fix(auth): use literal CivicCode intake secret names
29ba2f6 
Signed-off-by: Scott Converse <scott@civicsuite.local>

Co-Authored-By: Codex <codex@openai.com>
@scottconverse
scottconverse merged commit 9284fd1 into main May 29, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@scottconverse