feat(remoteaccess): TCP application access testing #3366

New issue

Open

opened 2026-05-18 14:23:25 +00:00 by mfreeman451 · 0 comments

mfreeman451 commented

2026-05-18 14:23:25 +00:00

Owner

Is your feature request related to a problem?

Remaining steps:

Run CI / DB-backed Elixir validation
- Go tests pass locally.
- Core broker Elixir tests pass locally.
- web-ng channel tests compile, but local test execution is skipped unless SERVICERADAR_REQUIRE_DB_TESTS=1 is set. That needs a DB-backed run in CI or against the project test DB/CNPG.
Do an end-to-end smoke
- Open registered app target.
- Send GET and POST body through browser -> WebSock -> broker -> agent -> upstream.
- Open registered TCP target through the TCP text client/workflow.
- Verify close/error/quota behavior and that sockets are cleaned up.
Verify audit/recording rows in a real stack
- Confirm app/TCP events store metadata and byte counts.
- Confirm request/response bodies and sensitive headers are not retained.
- Confirm quota-exhausted and failed states are visible.
Review/merge the follow-up PR
- Branch is clean and pushed: codex/harden-remote-access-app-tcp-followup.
- Latest commit: 110f34565 fix: enforce default app access body quotas.
After merge/deploy, archive/update OpenSpec if that is your normal workflow.

Describe the solution you'd like

A clear and concise description of what you want to happen.

Describe alternatives you've considered

A clear and concise description of any alternative solutions or features you've considered.

Additional context

Add any other context or screenshots about the feature request here.

**Is your feature request related to a problem?** Remaining steps: 1. Run CI / DB-backed Elixir validation - Go tests pass locally. - Core broker Elixir tests pass locally. - web-ng channel tests compile, but local test execution is skipped unless SERVICERADAR_REQUIRE_DB_TESTS=1 is set. That needs a DB-backed run in CI or against the project test DB/CNPG. 2. Do an end-to-end smoke - Open registered app target. - Send GET and POST body through browser -> WebSock -> broker -> agent -> upstream. - Open registered TCP target through the TCP text client/workflow. - Verify close/error/quota behavior and that sockets are cleaned up. 3. Verify audit/recording rows in a real stack - Confirm app/TCP events store metadata and byte counts. - Confirm request/response bodies and sensitive headers are not retained. - Confirm quota-exhausted and failed states are visible. 4. Review/merge the follow-up PR - Branch is clean and pushed: codex/harden-remote-access-app-tcp-followup. - Latest commit: 110f34565 fix: enforce default app access body quotas. 5. After merge/deploy, archive/update OpenSpec if that is your normal workflow. **Describe the solution you'd like** A clear and concise description of what you want to happen. **Describe alternatives you've considered** A clear and concise description of any alternative solutions or features you've considered. **Additional context** Add any other context or screenshots about the feature request here.