Policy chain designer, product quota, token-only users (#42) #44

Merged

Marc merged 8 commits from feature/issue-42-policy-chain-designer into main 2026-08-04 11:42:43 +00:00

Conversation 0 Commits 8 Files changed 19 +1001 -149

Marc commented 2026-08-04 11:41:57 +00:00

Contributor

Copy link

Summary

• Dashboard policy-chain designer with derived policies; Policy layers, product edit, admin API keys
• Product quota enforced as implicit throttle; token-only service users (no dashboard login)
• Docs/tests for API keys, gateway flow policies, and identity token-only accounts

Closes #42

Test plan

• Create derived policy via designer and replace a chain step
• Edit product rate limit / routes; verify product-layer throttle
• Admin: create API key for a user
• IAM: create token-only user → cannot login → admin API key works
• Focused tests: test_identity_token_only_user_cannot_login, policy chain tests

## Summary - Dashboard policy-chain designer with derived policies; Policy layers, product edit, admin API keys - Product quota enforced as implicit throttle; token-only service users (no dashboard login) - Docs/tests for API keys, gateway flow policies, and identity token-only accounts Closes #42 ## Test plan - [ ] Create derived policy via designer and replace a chain step - [ ] Edit product rate limit / routes; verify product-layer throttle - [ ] Admin: create API key for a user - [ ] IAM: create token-only user → cannot login → admin API key works - [ ] Focused tests: `test_identity_token_only_user_cannot_login`, policy chain tests

Marc added 8 commits 2026-08-04 11:41:57 +00:00

Add derived policy chain designer. ... 5347eb7953

Co-authored-by: Cursor <cursoragent@cursor.com>

Expose hidden dashboard navigation. ... 6d309abf31

Co-authored-by: Cursor <cursoragent@cursor.com>

Add product edit dialog. ... 457b28645b

Co-authored-by: Cursor <cursoragent@cursor.com>

Rename Products nav to Policy layers and add sidebar icons. ... 753e5a821f

Co-authored-by: Cursor <cursoragent@cursor.com>

Enforce product quota and drop trigger policy text field. ... 6cd0ba6ef3

Co-authored-by: Cursor <cursoragent@cursor.com>

Allow admins to create API keys for users. ... 30bf453589

Co-authored-by: Cursor <cursoragent@cursor.com>

Add token-only service users for API-key identities. ... c49e3ddbd0

Admins can create passwordless accounts that cannot dashboard-login but still own products, policies, and admin-issued API keys.

Co-authored-by: Cursor <cursoragent@cursor.com>

Document Forgejo auth via FORGEJO_TOKEN for agents. ... c744813c44

Keep API calls on code.meshflows.org token-based without pasting secrets into chat.

Co-authored-by: Cursor <cursoragent@cursor.com>

Marc merged commit d41dc851aa into main 2026-08-04 11:42:43 +00:00

Marc referenced this pull request from a commit 2026-08-04 11:42:47 +00:00

Merge pull request 'Policy chain designer, product quota, token-only users (#42)' (#44) from feature/issue-42-policy-chain-designer into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

MeshFlowsGPL/meshflows!44

No description provided.