feat(saas): prove durable authenticated mutation

req: auth/001 req: auth/002 req: auth/004 req: security/004 req: v1_release/003
2026-07-14 00:40:46 +02:00
parent c793de8224
commit ef8e38adf8
5 changed files with 363 additions and 20 deletions
@@ -7,7 +7,8 @@ What it proves:
 - typed form/newtype inputs for project creation
 - auth/session context passed through normal Rust state
 - CSRF-safe mutation checked before persistence
- local in-memory persistence adapter instead of a vendored SQL/auth provider
+- local atomic-file persistence adapter with rollback and process-restart proof instead of a vendored SQL/auth provider
+- a bounded `POST /projects` reference boundary requiring the current bearer session, exact origin, and CSRF token
 - generated form, slot, keyed row, page-swap, and live-status commands
 - page shell with plain CSS and one explicit metrics island script
 - compile-time surface generation plus interaction tests
@@ -25,6 +26,7 @@ Those production concerns belong in app adapters and recipes so the tutorial rem
 Run:

 ```sh
-cargo run -p hemx-saas-example
+HEMX_SAAS_STORE=/tmp/hemx-saas-projects.tsv cargo run -p hemx-saas-example
+cargo test -p hemx-saas-example --test production_reference
 cargo test -p hemx-saas-example
 ```