mirror of
https://github.com/azaion/missions.git
synced 2026-06-21 06:31:08 +00:00
Oleksandr Bezdieniezhnykh
24c4561bef
Batch 3 of test implementation cycle 1 (existing-code Step 6). - AZ-581 AuthClaimsTests: NFT-SEC-01..06+04b (foreign-keypair, byte-flip, 30s skew, iss/aud/perms, multi-value permissions array). - AZ-582 CrossCutting/ErrorRedaction/JwksRotation/StartupConfig/CorsConfig: NFT-SEC-07..13 (alg pin, kid rotation grace window, env fail-fast, CORS Production gate). - AZ-583 CascadeF3/CascadeF4/MigratorRestart: NFT-RES-01..04. CascadeF4 pins current walk-order divergence with carry_forward AC-4.6. - AZ-584 ConfigDbStartup/JwksRotationNoRestart/DefaultVehicleRace: NFT-RES-05..08. NFT-RES-08 pins current behaviour (unique-index closes the race) with carry_forward AC-1.4. Mock contract: SignBody accepts permissions OR permissions_array (mutually exclusive). TokenSigner validates kid_override against published keys so NFT-SEC-11 can assert "mock refuses old kid post-grace". Helpers added: ForeignKeypair (test-only ECDSA P-256), MissionsContainerHelper (docker-run wrapper for startup-time scenarios), DockerLogs. 7 of 22 new tests are Skippable, gated on COMPOSE_RESTART_ENABLED + docker CLI in the e2e-consumer image (explicit skip reason; no silent pass). Build green: test csproj + jwks-mock csproj. Co-authored-by: Cursor <cursoragent@cursor.com>
Azaion.Missions
NOTE (forward-looking): this repo is being renamed
flights->missions(Jira AZ-EPIC, child B4). The Gitea repo rename + suite.gitmodulesupdate +git mv flights missions(B4) is still pending.
.NET 10 REST API for mission planning (missions + waypoints) and the vehicle catalog (Plane / Copter / UGV / GuidedMissile) on Azaion edge devices.
GPS-Denied (orthophoto upload, live-GPS SSE, GPS corrections) is not part of this service -- it lives in the separate gps-denied service. See ../suite/_docs/11_gps_denied.md.
Suite context
- Tier: edge (runs on Jetson / OrangePI / operator-PC).
- Spec:
../suite/_docs/02_missions.md(post-rename). - DB: shared local PostgreSQL on the edge device; this service migrates only its own 4 tables (
vehicles,missions,waypoints,map_objects). - Auth: JWT validated locally with the suite-wide HMAC secret. Tokens are minted by the remote
adminservice.
Local docs
_docs/02_document/-- bottom-up discovery + module + component documentation produced by autodev.