Lock down wickedspooky.org Operator Console with Google OAuth

Backlog ID

60

Backlog Key

WSAI_OperatorConsoleOAuthLockdown_v1

Status

active

Outcome Status

active

Priority

critical

Type

work_item

Subsystem

Security / Operator Console

Product

Owner

Sam

Source

operator_console / WSAI_OperatorConsoleOAuthLockdown_v1

Authority Page

Created

2026-06-04 03:41:47

Updated

2026-06-04 03:41:47

Description

Protect wickedspooky.org/operator and associated internal Operations authority pages behind OAuth2 Proxy + Google. Operations should not remain anonymously accessible.

Acceptance Criteria

Accessing wickedspooky.org/operator redirects to Google OAuth; root public behavior is not unintentionally changed; operator API paths are protected unless separately tokenized; logout and 15-minute cookie expiration are configured.

Notes

Impact: ChatGPT cannot anonymously browse the internal Operator Console. Future AI access should use pasted exports, Make-mediated context, token-gated endpoints, or bootstrap packages.

Edit Controlled Fields

Status

Outcome Status

Priority

Owner

Description
Protect wickedspooky.org/operator and associated internal Operations authority pages behind OAuth2 Proxy + Google. Operations should not remain anonymously accessible.

Acceptance Criteria
Accessing wickedspooky.org/operator redirects to Google OAuth; root public behavior is not unintentionally changed; operator API paths are protected unless separately tokenized; logout and 15-minute cookie expiration are configured.

Notes
Impact: ChatGPT cannot anonymously browse the internal Operator Console. Future AI access should use pasted exports, Make-mediated context, token-gated endpoints, or bootstrap packages.

Event History (0 events)

No events recorded yet.

Lifecycle Actions

Machine Access

JSON Detail