31 lines
853 B
Markdown
31 lines
853 B
Markdown
# Интеграция auth-portal ↔ EvoFirewall
|
|
|
|
App id: **`fw`**.
|
|
|
|
Единый вход: JWT HS256 (общий `JWT_SECRET`), handoff через `#access_token=…`.
|
|
|
|
## Permissions
|
|
|
|
| Permission | UI |
|
|
|------------|-----|
|
|
| `fw:dashboard:read` | Dashboard |
|
|
| `fw:agents:read` / `write` | Agents |
|
|
| `fw:lists:read` / `write` | IP lists |
|
|
| `fw:policies:read` / `write` | Rules / overrides |
|
|
| `fw:stats:read` | Stats |
|
|
| `fw:settings:admin` | Settings |
|
|
|
|
## Portal checklist
|
|
|
|
1. `APP_IDS` включает `fw` (сделано)
|
|
2. Admin → Apps: URL EvoFirewall + выдача прав
|
|
3. `RETURN_TO_ALLOWLIST` — origin FW
|
|
|
|
## App env
|
|
|
|
См. EvoFirewall `docs/integrate-auth-portal.md`.
|
|
|
|
## Audit ingest
|
|
|
|
Dual-write локального журнала в portal: [`integrate-audit-ingest.md`](./integrate-audit-ingest.md) (`source_app: fw`).
|