caleb-brown/temper
1
0
Fork 0
Code Issues 36 Pull requests Projects Releases Packages Wiki Activity Actions

Manage Temper Operators and sessions #22

New issue
Open
opened 2026-07-14 22:32:26 -04:00 by caleb-brown · 0 comments
caleb-brown commented 2026-07-14 22:32:26 -04:00
Owner
Copy link

What to build

Existing Temper Operators can safely manage additional equal-privilege Operators and active sessions without public signup or an enterprise RBAC system.

Acceptance criteria

  • An authenticated Operator can create another Operator through a secure invitation or bootstrap-reset flow.
  • Operators can rotate their passwords and administrators can disable an account without exposing password material.
  • Temper prevents removal or lockout of the last usable Operator.
  • Sessions are server-side, expiring, revocable, securely cookie-bound, and invalidated when required by account changes.
  • Login throttling and CSRF protection cover all authentication and mutating Operator actions.
  • Operator and session lifecycle changes are append-only audited.
  • Security tests cover fixation, expiry, revocation, throttling, CSRF, disabled accounts, and last-Operator protection.

Blocked by

  • #9 — Boot a secure Temper Deployment
## What to build Existing Temper Operators can safely manage additional equal-privilege Operators and active sessions without public signup or an enterprise RBAC system. ## Acceptance criteria - [ ] An authenticated Operator can create another Operator through a secure invitation or bootstrap-reset flow. - [ ] Operators can rotate their passwords and administrators can disable an account without exposing password material. - [ ] Temper prevents removal or lockout of the last usable Operator. - [ ] Sessions are server-side, expiring, revocable, securely cookie-bound, and invalidated when required by account changes. - [ ] Login throttling and CSRF protection cover all authentication and mutating Operator actions. - [ ] Operator and session lifecycle changes are append-only audited. - [ ] Security tests cover fixation, expiry, revocation, throttling, CSRF, disabled accounts, and last-Operator protection. ## Blocked by - [#9](https://git.caleb-brown.dev/caleb-brown/temper/issues/9) — Boot a secure Temper Deployment
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
dev
t3code/hygiene-review
t3code/configurable-llm-timeout
fix/openai-non-streaming-completions
t3code/test-incorrect-changes
No results found.
Labels
Clear labels   
ready-for-agent
Fully specified and ready for an implementation agent

  
wayfinder:grilling
Human-in-the-loop product or domain decision

  
wayfinder:map
Canonical Wayfinder map

  
wayfinder:prototype
Human-in-the-loop concrete prototype

  
wayfinder:research
Agent-driven primary-source research

  
wayfinder:task
Task that unblocks a Wayfinder decision

No labels
ready-for-agent
wayfinder:grilling
wayfinder:map
wayfinder:prototype
wayfinder:research
wayfinder:task
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Blocks
#23 Rotate service credentials and encryption keys
caleb-brown/temper
#27 Package a recoverable production release
caleb-brown/temper
Depends on
#9 Boot a secure Temper Deployment
caleb-brown/temper
Reference
caleb-brown/temper#22
No description provided.