Skip to content

Set production Cloud Build defaults to Identity Platform auth - #62

Closed
sokanacollectiveCRM wants to merge 451 commits into
disc-template:mainfrom
sokanacollectiveCRM:fix/production-identity-cloudbuild
Closed

sokanacollectiveCRM wants to merge 451 commits into
disc-template:mainfrom
sokanacollectiveCRM:fix/production-identity-cloudbuild

Conversation

@sokanacollectiveCRM

Copy link
Copy Markdown

Summary

  • Set cloudbuild.yaml substitution defaults to VITE_AUTH_MODE=identity with Firebase public web config for sokana-private-data.
  • Update .env.example to document identity as the production auth mode (cookie is legacy Supabase session transport).

Why

Production admin accounts authenticate via Google Cloud Identity Platform. When Cloud Build baked in cookie mode, password reset called Supabase instead of Firebase and reset emails never arrived for migrated admins.

The GCP Cloud Build trigger was already updated separately; this keeps repo defaults aligned so future trigger recreation or manual builds stay correct.

Test plan

  • Merge and confirm the next Cloud Build for main uses _VITE_AUTH_MODE=identity
  • On production CRM, submit Reset password and verify Network calls identitytoolkit.googleapis.com
  • Confirm admin login + MFA still works after deploy

Made with Cursor

keigocodes and others added 30 commits May 22, 2025 21:01
… (could cause problems for others?? but haven't seen)
… (could cause problems for others?? but haven't seen)
sokanacollectiveCRM and others added 24 commits August 20, 2026 14:49
…error-ux

Harden Payment Schedule errors and admin-only CSV Export
Replace PHI/token/body console usage with metadata-only safeLog, add a CI gate that blocks console.log/debug regressions, and cover production no-op logger behavior with unit tests.

Co-authored-by: Cursor <cursoragent@cursor.com>
…-sensitive-logging

HIPAA-07: remove sensitive frontend console logging
Silences Radix DialogContent warning when opening a lead profile from the Leads tab.

Co-authored-by: Cursor <cursoragent@cursor.com>
…og-description

Add Lead Profile DialogDescription (a11y follow-up)
- scripts/lint-changed.mjs mirrors CI (eslint + prettier on changed files)
- Husky pre-push hook runs npm run lint:push automatically
- Fix Prettier errors blocking lint workflow on LeadProfileModal

Co-authored-by: Cursor <cursoragent@cursor.com>
…ve UI.

Use PUT /clients/:id/birth-outcomes for structured dropdown/checkbox fields and drop free-text birth_outcomes from types and profile views.

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
…og-description

Add pre-push lint checker + fix LeadProfileModal CI failures
…atar does not flash the default image.

Keep a local preview and loading state until the saved photo has loaded, and surface the real save error from the API.

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
…pload-ui

Improve profile photo upload UI and loading state
* Quiet CRM deep-link misses instead of dual error UI.

When an email link targets a missing client, return to the clients list without the list error banner or Client Not Found modal.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Fix Playwright smoke by stubbing the dedicated birth-outcomes API.

The save path moved to PUT /clients/:id/birth-outcomes, so the old client PUT stub never recorded Induction: Yes.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Jerry Bony <info@techluminateacademy.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Remove vercel.json and update production backend URL error text for Cloud Run builds.

Co-authored-by: Cursor <cursoragent@cursor.com>
Retire Vercel deploy config from frontend-crm
…ews.

Replace public Supabase template URLs with backend signed-url/download fallbacks, and wire staff CRM login/session for Identity Platform alongside existing auth modes.

Co-authored-by: Cursor <cursoragent@cursor.com>
Apply Prettier formatting and remove unused catch bindings so the PR lint workflow passes.

Co-authored-by: Cursor <cursoragent@cursor.com>
Forward Firebase password-reset query params from /login to /auth/reset-password so admin migration emails can complete password setup.

Co-authored-by: Cursor <cursoragent@cursor.com>
…bcode-redirect

Fix Identity Platform admin reset link token routing
Ship the public signing experience, Great Vibes signature styling, signed-contract viewing in billing, and CRM navigation updates for the native contract flow.

Co-authored-by: Cursor <cursoragent@cursor.com>
…port-contracts

Add native labor support signing UI and billing contract viewing
Cast list filters to query params so Cloud Build tsc passes on main deploy.

Co-authored-by: Cursor <cursoragent@cursor.com>
…lter-types

Fix frontend deploy TypeScript build for billing filters
Password reset and admin login require VITE_AUTH_MODE=identity with Firebase web config baked into Cloud Run builds; cookie mode only hits Supabase and breaks migrated admin accounts.

Co-authored-by: Cursor <cursoragent@cursor.com>
@vercel

vercel Bot commented Aug 31, 2026

Copy link
Copy Markdown

@jbony2888 is attempting to deploy a commit to the DISC NU's projects Team on Vercel.

A member of the Team first needs to authorize it.

@sokanacollectiveCRM

Copy link
Copy Markdown
Author

Opened on wrong repo by mistake; see sokanacollectiveCRM#100.

@sokanacollectiveCRM
sokanacollectiveCRM deleted the fix/production-identity-cloudbuild branch August 31, 2026 11:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants