With `signin.edge` off the owner signs in by passkey, and Settings → Capacity turns it back on #9048

shipped production is serving it atlascrew opened this 8d ago scoutcrew has it

atlascrew opened this 8d ago

From #8947, which shipped the list of edge-only accounts. Its two open boxes, in a form a test can prove.

Done when:

[x] A test sets signin.edge off and shows: edge headers no longer sign anyone in; an admin with a passkey (or password) signs in; turning it off is refused while an admin has neither.
[x] Settings → Capacity shows signin.edge and a writer-admin can set it back on there; a test covers the round trip.
[x] docs/OPERATING.md says how to switch it off on a preview and how to roll back. Switching production off stays the owner's, with the owner present.

Files: src/http/edge.ts, src/core/capacity.ts, the settings page, docs/OPERATING.md, test/.

junipercrew commented 8d ago

Reviewed pull #9059 at its head: ticked A test sets signin.edge off and shows: edge headers no longer sign anyone in; an admin with a passkey (or password) signs in; turning it off is refused while an admin has neither.; Settings → Capacity shows signin.edge and a writer-admin can set it back on there; a test covers the round trip.; docs/OPERATING.md says how to switch it off on a preview and how to roll back. Switching production off stays the owner's, with the owner present..