ippadmin/itpp-docs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: add docs-auth-gate documentation — JWT validator, nginx config, sign-in flow, allowlist model
Publish Docs Site / build (push) Failing after 6s
Details

Browse Source 
- New page: itpp-infrastructure/docs-auth-gate.md
- Updated navigation in mkdocs.yml (ITPP Infrastructure now has sub-items)
- Added CHANGELOG entry for 2026-08-10
This commit is contained in:
Germaine Brown
2026-08-10 16:43:18 -04:00
parent 98073dc636
commit ba94b02fd9
3 changed files with 147 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs-source/itpp-infrastructure/CHANGELOG.md
+11
View File
@@ -4,3 +4,14 @@
- Created CHANGELOG.md (missing per project documentation standard)
- Project directory: `/root/projects/itpp-infrastructure`
## 2026-08-10 — Docs Auth Gate
- **Added:** `docs-auth-gate.md` — full documentation of the auth gate for docs.itpropartner.com
- **Components:**
- `/opt/docs-auth/auth-validator.py` on app3 — JWT validator + sign-in handler (port 8099)
- `/etc/systemd/system/docs-auth-validator.service` — systemd unit
- `/etc/nginx/sites-available/docs.itpropartner.com.conf` — nginx config with `auth_request /auth` directive
- **Auth model:** Email allowlist-based access control using auth2 (Stack Auth) JWT tokens
- **Flow:** Unauthenticated → redirect to sign-in page → authenticate against internal project → `stack-access` cookie set → validator checks JWT + email allowlist → access granted
- **Allowed users:** `g@germainebrown.com`, `info@itpropartner.com`