cjw/Oxicloud
1
0
Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity

feat(job-registry): remplace /api/admin/internal/trigger-*

Browse Source 
remplace /api/admin/internal/trigger-* to /api/admin/jobs/{...}/trigger
remove OXICLOUD_ENABLE_ADMIN_INTERNAL_ENDPOINTS
This commit is contained in:
Edouard Vanbelle
2026-07-27 23:40:40 +02:00
parent dfedde54a4
commit f66f7fa31f
24 changed files with 155 additions and 464 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/architecture/rebac-authorization.md
+5 -5
View File
@@ -360,11 +360,11 @@ grace window has zero effect on live access decisions — an expired grant is
invisible to `check(...)` even during the grace period. Cleanup only affects
storage bloat and the `list_grants_*` history surface.
The daemon runs inside the same process (`tokio::spawn` at startup, same
lifecycle as trash-cleanup / storage-usage sweep), so no external scheduler
is needed. An admin-triggered `POST /api/admin/internal/trigger-grant-cleanup`
lets operators force a purge in test or incident scenarios; the internal-
endpoints gate (`OXICLOUD_ENABLE_ADMIN_INTERNAL_ENDPOINTS`) applies.
The daemon runs inside the same process, registered with the periodic-job
scheduler (`docs/plan/job-registry.md`) on a 24-hour tick. An admin-
triggered `POST /api/admin/jobs/grant_cleanup/trigger?force=true` lets
operators force a purge in test or incident scenarios — `force=true`
collapses the grace window to zero for that call only.
The [Share Integration](/architecture/share-integration) doc's reverse
trigger takes it from there: when the daemon deletes the last `role_grants`