tylerg/auth-yes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
auth-yes/tasks/new/2026-0825.02.gem.feat.event-passes.multi-claim-workshops-and-kiosks-0046.md
google-labs-jules[bot] 2d34aa15a7 feat: implement ephemeral 1-click magic link redemption (/pass) 
Implements the GET /pass?token=... endpoint for validating session tokens, resolving the correct target application domain dynamically, and routing users seamlessly using ephemeral 1-click magic links.
Also updates the Sessions Hub UI hand-off modal to display the 1-Click Magic Link and adds full test coverage.

Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
2026-08-25 08:25:31 +00:00

2.0 KiB
Raw Blame History

TASK METADATA

  • Target Files:
    • server/db.ts
    • server/main.ts
    • ui/components/EventJoinPage.tsx
    • ui/components/EventSplashPage.tsx
    • server/main.test.ts
  • Core Objective: Implement Multi-Claim Event Passes with short vanity URLs (/e/:slug), universal PIN join portal (/join), and CLI environment 1-liner (/join/:slug?format=env).
  • Dependencies: server/db.ts, server/auth-session.ts
  • Additional Important Notes: Provisions isolated guest seats (guest_<slug>_<index>) with individual sessions.

1. Architectural Considerations & Risks

  • Concurrency & Seat Limits:
    • Ensure atomicity when incrementing seats_claimed on event_passes so events with strict seat limits (e.g. 50 seats) do not oversubscribe.
  • Multi-Channel Accessibility:
    • Support web browser UI (/e/:slug, /join), JSON API (POST /api/join), and CLI environment output (GET /join/:slug?format=env).
  • Session Isolation:
    • Each attendee gets their own dedicated guest session and UUID, preventing state collision in shared sandbox apps.

2. Proposed Implementation

  1. Database Schema (server/db.ts):
    • Create event_passes table with columns: id, slug, pin_code, name, app_id, role, max_seats, seats_claimed, lifespan_hours, created_by, is_active, expires_at, created_at.
  2. API Endpoints (server/main.ts):
    • POST /api/events: Create a new event pass.
    • GET /e/:slug: Web landing splash with "Enter Workshop" button.
    • GET /join: Universal PIN / code entry page.
    • POST /api/join: Redeems code or PIN, creates isolated guest user and session, sets cookie or returns JSON.
    • GET /join/:slug: Returns CLI 1-liner (export AUTH_YES_TOKEN="..." when ?format=env).
  3. SSR UI Components:
    • ui/components/EventJoinPage.tsx
    • ui/components/EventSplashPage.tsx
  4. Automated Tests (server/main.test.ts):
    • Test event creation, PIN redemption, seat limit capping, and CLI output format.