From e71bc8d0e1cddf03075980caf39bf37c688a7d88 Mon Sep 17 00:00:00 2001 From: Chris Christiansen Date: Sun, 28 Jun 2026 10:15:57 +0000 Subject: [PATCH] fix: korrekt IAP_CLIENT_ID i docs + session log 2026-06-28 --- docs/HANDOFF.md | 4 ++-- docs/OSVAUCO_OPAX_SESSION_LOG.md | 10 ++++++++++ 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/docs/HANDOFF.md b/docs/HANDOFF.md index 1cc79de..7cbc8c9 100644 --- a/docs/HANDOFF.md +++ b/docs/HANDOFF.md @@ -70,7 +70,7 @@ - **Gitea API-token:** Secret Manager → `gitea-api-token` - **MCP-Secret:** Secret Manager → `mcp-secret` - **Prosjekt:** `propane-will-491900-m5` -- **IAP OAuth Client ID (opax backend):** `357036551735-kq8nt71d38hfqlcfb3n52ef7ala4meo.apps.googleusercontent.com` +- **IAP OAuth Client ID (opax backend):** `357036551735-kq8nt7ld38hfqlcfb3n52ef7tala4meo.apps.googleusercontent.com` - **IAP Backend Service path:** `/projects/357036551735/global/backendServices/` (satt som `OPAX_IAP_CLIENT_ID` i Cloud Run) --- @@ -94,7 +94,7 @@ Kjør fra `osvauco-dev-vm`: ```bash # Hent identity token med korrekt IAP audience TOKEN=$(curl -s -H "Metadata-Flavor: Google" \ - "http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity?audience=357036551735-kq8nt71d38hfqlcfb3n52ef7ala4meo.apps.googleusercontent.com&format=full") + "http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity?audience=357036551735-kq8nt7ld38hfqlcfb3n52ef7tala4meo.apps.googleusercontent.com&format=full") # Test mot opax via IAP load balancer curl -si https://opax.vauco.no/opax/build-status \ diff --git a/docs/OSVAUCO_OPAX_SESSION_LOG.md b/docs/OSVAUCO_OPAX_SESSION_LOG.md index dd5ba4d..cdecad1 100644 --- a/docs/OSVAUCO_OPAX_SESSION_LOG.md +++ b/docs/OSVAUCO_OPAX_SESSION_LOG.md @@ -237,3 +237,13 @@ Manuelt verifisere `/billing/summary` via nettleser-login på opax.vauco.no (sje - Slutt : 2026-06-28 01:46 UTC - Gjort : --- - Uløst : --- + +## SLUTTRAPPORT — 2026-06-28 — IAP auth verifisering +- Hva: Verifisert IAP auth ende-til-ende fra osvauco-dev-vm +- Rotårsak 401: Skrivefeil i IAP_CLIENT_ID i docs — korrekt ID hentet fra gcloud run services describe opax-mcp +- Korrekt IAP_CLIENT_ID: 357036551735-kq8nt7ld38hfqlcfb3n52ef7tala4meo.apps.googleusercontent.com +- Verifisering: HTTP/2 200 fra https://opax.vauco.no/opax/build-status +- Filer rettet: docs/HANDOFF.md, docs/LEARNINGS.md + +## NESTE OPPGAVE +Bootstrap Emma på VM: synk Gitea fra GitHub, deretter kjør emma/setup.sh