Skip to content

This PR resolves four backend integration gaps in separate commits: - #811

Merged
maugauwi-hash merged 5 commits into
ethos-protocol:mainfrom
lekescrew22:main
Oct 21, 2026
Merged

maugauwi-hash merged 5 commits into
ethos-protocol:mainfrom
lekescrew22:main

Conversation

@lekescrew22

Copy link
Copy Markdown
Contributor

Closes #741
Closes #742
Closes #743
Closes #744

Summary
This PR resolves four backend integration gaps in separate commits:

SAML SSO: Export and mount metadata, login, and ACS routes. Add environment-backed service-provider/identity-provider configuration and XML-DSig verification against the pinned IdP certificate; routes fail closed while SAML is not configured.
Read replicas: Export read_replica, configure replica connections from environment settings, route database reads through the selector, and fall back to the primary when no replica is healthy. Add explicit construction and routing/failover coverage.
CDC: Export the existing CDC module from the crate root.
Fraud scoring: Mount POST /fraud/score, persist each result in the SQL audit log, apply per-tier rate limits, document the endpoint, and test response/audit persistence.
Validation
All 23 SAML module tests passed in an isolated harness.
Added tests for replica selection/failover and the mounted fraud scoring route/audit record.
The focused Cargo test could not reach test execution because the existing backend crate does not compile: it has missing modules and unrelated pre-existing type/API errors (including existing fraud test fixtures). These baseline failures are outside this PR scope.
Commits
18dd7bb Mount and secure SAML SSO routes
205da58 Integrate read replicas with Db
fa55e6b Expose CDC module
70b7764 Mount fraud scoring with audit logging

lekescrew22 and others added 5 commits October 17, 2026 17:32
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Route database reads through the configured replica selector and fall back to the primary when no replica is healthy. Configure replicas from environment variables, expose metrics access, and cover replica selection and failover.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Expose the fraud-scoring endpoint, persist each score to the database audit log, and add a bounded authenticated rate limit. Document the request and response contract and cover the mounted route and audit record.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Wire SAML, read replicas, CDC, and fraud scoring
@drips-wave

drips-wave Bot commented Oct 17, 2026

Copy link
Copy Markdown

@lekescrew22 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@maugauwi-hash
maugauwi-hash merged commit 859b271 into ethos-protocol:main Oct 21, 2026
2 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

2 participants