7 Commits

Include renames

Author	SHA1	Message	Date
Emil	a201dd5ef9	Reject stale sessions before worker key creation	2026-07-27 22:28:02 +03:00
Efremenko Arhip	3a1461315f	feat: self-service worker enrollment bound to a user account ... Let a signed-in user turn their own machine into a worker without the shared token. The coordinator already binds a JWT-authenticated registration to owner_id as untrusted; this adds the missing pieces. userservice: long-lived worker keys (scimesh_wk_live_*, hash-at-rest) with create/list/revoke and a public /worker-tokens/exchange that trades a key for a short-lived JWT carrying the owner current role/verified. python worker: SCIMESH_WORKER_KEY + SCIMESH_USERSERVICE_URL; a token provider exchanges the key and refreshes the JWT proactively and on 401, so a long-running worker survives token expiry. Static bearer token path is unchanged. coordinator UI: an "add your machine" page that mints a key and shows a ready-to-run command, proxying key management to the userservice; the dashboard gains an owner-scoped "my machines" section. docs: how to run a worker from your account, plus the untrusted/quorum/ verified trust model.	2026-07-27 16:11:07 +03:00
Efremenko Arhip	9a458ec4ef	feat(users): admin promote/demote endpoints ... POST /users/{id}/promote and /demote set a user's role (admin/user), admin-only (403 otherwise). Mirrors the verify endpoints: SetRole use case + repo method, validated role. Unit, admin-flow, and integration tests included.	2026-07-26 21:14:32 +03:00
Efremenko Arhip	c6a66747eb	feat(users): add admin-granted verified badge for trusted contributors ... - migration 0002: users.verified boolean, default false - verified rides in the JWT (role + verified claims) - POST /users/{id}/verify + /unverify, admin-only (403 otherwise) - Issue now takes the whole user so trust claims travel in the token - unit + integration + admin-flow tests	2026-07-26 19:10:01 +03:00
Efremenko Arhip	67407220c3	ci(users): add pipeline (vet, gofmt, race, lint, migrate, integration) ... Mirrors the coordinator workflow against a scimesh_users Postgres service. Switches the test request helper to http.NewRequestWithContext so the noctx linter passes on the go1.22 module.	2026-07-26 16:27:24 +03:00
Efremenko Arhip	73196579e8	test(users): cover config, usecase error paths, and /me 500 path	2026-07-26 16:15:36 +03:00
Efremenko Arhip	a3db1a1e67	add users logic	2026-07-26 14:38:24 +03:00