Files
bootnode/api/tests
zeekay 537449038e feat(fleet): server-side admin gate on the luxd fleet overview
Deny-by-default on the ONE cross-tenant infra route, enforced on both the
standalone fleet_app and the mounted api/fleets router:
  unauthenticated -> 401 · invalid token -> 401 · non-admin -> 403 · admin -> 200

Adversarial test exercises the gate end-to-end over real HTTP; only JWKS
verification and the luxd RPC collector are stubbed.
2026-07-25 12:35:14 -07:00
..
2026-01-26 10:20:42 -08:00
2026-01-26 10:20:42 -08:00