move into sonardesk
This commit is contained in:
@@ -0,0 +1,23 @@
|
||||
# Phase 10 — Read-only customer licence portal
|
||||
|
||||
## Install
|
||||
Extract this archive at the ABSDev project root, preserving paths. Merge `IntegratedLicensingServiceProvider.php` if locally customised. Do not replace the production licensing application.
|
||||
|
||||
```sh
|
||||
composer dump-autoload
|
||||
php artisan optimize:clear
|
||||
php artisan route:list --path=account/sonardesk -v
|
||||
```
|
||||
|
||||
Visit `/account/sonardesk` while signed in with a **verified** ABSDev account. Licences are matched to `customer_email` case-insensitively; no cross-application SSO or automatic account linking is claimed.
|
||||
|
||||
## Security and scope
|
||||
- Authenticated and verified users only, rate-limited.
|
||||
- Ownership checked on each licence detail request, returning 404 for non-owners.
|
||||
- No subscription cancellation, upgrade, activation changes, key retrieval or checkout.
|
||||
- No new migrations, secrets or third-party API calls.
|
||||
- Existing Paddle billing, licensing APIs, admin routes and webhooks are untouched.
|
||||
- Test with one owner, one unrelated user and an unverified user before release.
|
||||
|
||||
## Phase 11
|
||||
Downloads, releases and update feeds.
|
||||
Reference in New Issue
Block a user