mirror of
https://github.com/dadosfera/maestro.git
synced 2026-10-15 22:49:08 +00:00
TDD plan for GET /auth/module-identity: Phase 1 (identity + module gate, Tasks 1-3) and Phase 2 (per-service authz via namespace-derived orchest-api host, Tasks 4-6, incl. the orchest-side service_access_auth_url change in the dbt-to-orchest repo). Reuses the existing JWKS verify (validateJwtToken → public verifyAccessToken); config via process.env; Jest controller specs with mocked AuthClientService. Spec: dbt-to-orchest docs/superpowers/specs/2026-08-20-maestro-module-identity-design.md. Co-Authored-By: WOZCODE <contact@withwoz.com>