Projects API for a person's token or the service account (PUT/GET /api/projects/:id) by stuartc · Pull Request #5238 · OpenFn/lightning

Drop the /commit command and turn off Claude attribution in settings

stuartc

committed

9e70e80

Let service accounts with projects:write through GET /api/projects/:id's pipeline

stuartc

committed

c9e67cf

Give service accounts project standing in Scope and ProjectUsers

stuartc

committed

d12ebc7

Make the service-account permissions test classify every ProjectUsers action

stuartc

committed

5b01698

Refuse a failing service-account token with invalid_token on the person-or-service-account pipeline

stuartc

committed

ef4c6ab

Declare the projects:write scope on the :projects_api pipeline and restore AccessTokenAuth's single with

stuartc

committed

341cd39

Write out the service account's allowed project actions and inline its scope build

stuartc

committed

d2b650e

Add Lightning.Actor, the person or service account a context function records

stuartc

committed

d124eb3

Record who created a project and added its first members, and take notify as an option

stuartc

committed

5eb8fcb

Require an actor on update_project and audit name and description changes

stuartc

committed

305b0c4

Let a superuser or a service account create a project, through Provisioning's :create_project

stuartc

committed

c482307

Show a project's members on GET /api/projects/:id

stuartc

committed

10bfa48

Return a taken project id as an error on id instead of raising

stuartc

committed

1317772

Create or replace a project with PUT /api/projects/:id

stuartc

committed

badaf18

Refuse a token request that names no scope with invalid_scope

stuartc

committed

49d5bd9

Answer GET /api/projects/:id with 409 for a scheduled project and 403 for a policy refusal

stuartc

committed

2db452b

Refuse a PUT /api/projects/:id body key it does not take with 422 under that key

stuartc

committed

9bd9292

Keep members' emails out of PUT /api/projects/:id 422 messages

stuartc

committed

e93b38f

Restore the benchmark scripts' formatting, keeping create_project's actor

stuartc

committed

f57b591

Resolve the project's Scope once in ProjectController instead of reading scheduled_deletion

stuartc

committed

0738e03

Resolve members by email in one query through Projects.members_by_email/1

stuartc

committed

c4a30e0

Flatten a member's own errors into plain messages under members on PUT /api/projects/:id

stuartc

committed

84aa785

Roll create_project back with an error when its audit events cannot be recorded

stuartc

committed

4486f97

Refuse a notify of null on PUT /api/projects/:id with 422 under notify

stuartc

committed

983d044

Audit name and description changes made through update_project_with_users

stuartc

committed

4da5775

Build Scope's and Provisioning's actor types on Lightning.Actor

stuartc

committed

78b9930

Resolve members through Accounts.list_users_by_emails and take their roles from RolesEnum

stuartc

committed

d72762b

Use Scope.actor in Provisioning's authorize spec instead of a copy

stuartc

committed

1047dd5

Call create_sandbox directly instead of through create_empty_sandbox

stuartc

committed

038fc01

Share the service-account and scheduled-project helpers and leave the members_by_email cases to projects_test

stuartc

committed

373d807

Write the owner row last so an ownership handover never trips the one-owner index

stuartc

committed

9d2dd33

Navigation Menu

Repository navigation

Projects API for a person's token or the service account (PUT/GET /api/projects/:id) - #5238

Projects API for a person's token or the service account (PUT/GET /api/projects/:id)#5238
stuartc wants to merge 31 commits into
mainfrom
stuart/con-329-projects

Commits on Oct 9, 2026

Drop the /commit command and turn off Claude attribution in settings

Let service accounts with projects:write through GET /api/projects/:id's pipeline

Give service accounts project standing in Scope and ProjectUsers

Make the service-account permissions test classify every ProjectUsers action

Refuse a failing service-account token with invalid_token on the person-or-service-account pipeline

Declare the projects:write scope on the :projects_api pipeline and restore AccessTokenAuth's single with

Write out the service account's allowed project actions and inline its scope build

Add Lightning.Actor, the person or service account a context function records

Record who created a project and added its first members, and take notify as an option

Require an actor on update_project and audit name and description changes

Let a superuser or a service account create a project, through Provisioning's :create_project

Show a project's members on GET /api/projects/:id

Return a taken project id as an error on id instead of raising

Create or replace a project with PUT /api/projects/:id

Refuse a token request that names no scope with invalid_scope

Answer GET /api/projects/:id with 409 for a scheduled project and 403 for a policy refusal

Refuse a PUT /api/projects/:id body key it does not take with 422 under that key

Keep members' emails out of PUT /api/projects/:id 422 messages

Restore the benchmark scripts' formatting, keeping create_project's actor

Resolve the project's Scope once in ProjectController instead of reading scheduled_deletion

Resolve members by email in one query through Projects.members_by_email/1

Flatten a member's own errors into plain messages under members on PUT /api/projects/:id

Roll create_project back with an error when its audit events cannot be recorded

Refuse a notify of null on PUT /api/projects/:id with 422 under notify

Audit name and description changes made through update_project_with_users

Build Scope's and Provisioning's actor types on Lightning.Actor

Resolve members through Accounts.list_users_by_emails and take their roles from RolesEnum

Use Scope.actor in Provisioning's authorize spec instead of a copy

Call create_sandbox directly instead of through create_empty_sandbox

Share the service-account and scheduled-project helpers and leave the members_by_email cases to projects_test

Write the owner row last so an ownership handover never trips the one-owner index