24 lines
1.1 KiB
Markdown
24 lines
1.1 KiB
Markdown
# Phase 10 — Read-only customer licence portal
|
|
|
|
## Install
|
|
Extract this archive at the ABSDev project root, preserving paths. Merge `IntegratedLicensingServiceProvider.php` if locally customised. Do not replace the production licensing application.
|
|
|
|
```sh
|
|
composer dump-autoload
|
|
php artisan optimize:clear
|
|
php artisan route:list --path=account/sonardesk -v
|
|
```
|
|
|
|
Visit `/account/sonardesk` while signed in with a **verified** ABSDev account. Licences are matched to `customer_email` case-insensitively; no cross-application SSO or automatic account linking is claimed.
|
|
|
|
## Security and scope
|
|
- Authenticated and verified users only, rate-limited.
|
|
- Ownership checked on each licence detail request, returning 404 for non-owners.
|
|
- No subscription cancellation, upgrade, activation changes, key retrieval or checkout.
|
|
- No new migrations, secrets or third-party API calls.
|
|
- Existing Paddle billing, licensing APIs, admin routes and webhooks are untouched.
|
|
- Test with one owner, one unrelated user and an unverified user before release.
|
|
|
|
## Phase 11
|
|
Downloads, releases and update feeds.
|