Verify live Discord party flow and Coolify deployment #29

Open
opened 2026-09-23 06:18:08 +02:00 by rexlManu · 2 comments
Owner

After a Discord application, public API/web domains, and Coolify service are available: check the exact OAuth callback, HTTPS cookie and CORS behavior, desktop pairing and revocation, a two-account party WebSocket session, public/hidden leaderboard visibility, persistent SQLite volume and restart recovery. Use test accounts and temporary sessions. The local source and synthetic tests are tracked in #26-#28; do not claim this live check passed before it runs.

After a Discord application, public API/web domains, and Coolify service are available: check the exact OAuth callback, HTTPS cookie and CORS behavior, desktop pairing and revocation, a two-account party WebSocket session, public/hidden leaderboard visibility, persistent SQLite volume and restart recovery. Use test accounts and temporary sessions. The local source and synthetic tests are tracked in #26-#28; do not claim this live check passed before it runs.
Author
Owner

Coolify project and Compose app are deployed at https://garmoth.apps.it-lampe.de and https://garmoth-api.apps.it-lampe.de. Both services report healthy; public site / and /connect plus API /health return 200 over valid TLS. Production-origin CORS allows the website and rejects a foreign origin. Discord Developer Portal now contains the exact production callback after reload. The SQLite volume is persistent and has a daily local backup schedule. Source and deployment commits: 3b62b99, 16f3969, da5b049. Packaged desktop builds default to the production API; dev builds stay local. Still pending with test accounts: complete OAuth login and desktop pairing, two-account live party, leaderboard visibility, and SQLite restart recovery. No real user sessions were submitted.

Coolify project and Compose app are deployed at https://garmoth.apps.it-lampe.de and https://garmoth-api.apps.it-lampe.de. Both services report healthy; public site / and /connect plus API /health return 200 over valid TLS. Production-origin CORS allows the website and rejects a foreign origin. Discord Developer Portal now contains the exact production callback after reload. The SQLite volume is persistent and has a daily local backup schedule. Source and deployment commits: 3b62b99, 16f3969, da5b049. Packaged desktop builds default to the production API; dev builds stay local. Still pending with test accounts: complete OAuth login and desktop pairing, two-account live party, leaderboard visibility, and SQLite restart recovery. No real user sessions were submitted.
Author
Owner

Desktop Discord login persistence fix pushed in 4773e17. Token restore now runs after Electron is ready; temporary key-store failures do not erase the encrypted token, and encryption failures can fall back to the private token file. Four focused token tests and workspace typecheck passed. docs/coolify.md (c8cf617) records the existing deployment, persistent community-data volume, backup, update, and restore steps. A real installed-app update and test-account sign-in after a Coolify redeploy remain live checks. Keep this issue open.

Desktop Discord login persistence fix pushed in 4773e17. Token restore now runs after Electron is ready; temporary key-store failures do not erase the encrypted token, and encryption failures can fall back to the private token file. Four focused token tests and workspace typecheck passed. docs/coolify.md (c8cf617) records the existing deployment, persistent community-data volume, backup, update, and restore steps. A real installed-app update and test-account sign-in after a Coolify redeploy remain live checks. Keep this issue open.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
rexlManu/garmith-app#29
No description provided.