{"backlog_id":60,"backlog_key":"WSAI_OperatorConsoleOAuthLockdown_v1","title":"Lock down wickedspooky.org Operator Console with Google OAuth","subsystem":"Security / Operator Console","product_key":null,"product_name":null,"backlog_type":"work_item","status":"active","outcome_status":"active","priority":"critical","sort_order":0,"owner":"Sam","source_type":"operator_console","source_reference":"WSAI_OperatorConsoleOAuthLockdown_v1","authority_page_id":null,"description":"Protect wickedspooky.org/operator and associated internal Operations authority pages behind OAuth2 Proxy + Google. Operations should not remain anonymously accessible.","acceptance_criteria":"Accessing wickedspooky.org/operator redirects to Google OAuth; root public behavior is not unintentionally changed; operator API paths are protected unless separately tokenized; logout and 15-minute cookie expiration are configured.","notes":"Impact: ChatGPT cannot anonymously browse the internal Operator Console. Future AI access should use pasted exports, Make-mediated context, token-gated endpoints, or bootstrap packages.","source_table":"operator_backlog_items","source_key":"WSAI_OperatorConsoleOAuthLockdown_v1","created_date":"2026-06-04","created_at":"2026-06-04 03:41:47","updated_at":"2026-06-04 03:41:47"}