fix: retire portal_admin mint-link (dead /portal/enter URL); refresh docstrings; assert revoke route gone

2026-06-16 00:15:09 +00:00
parent f0a13ea2ff
commit 01180d5725
3 changed files with 19 additions and 21 deletions
@@ -1,9 +1,10 @@
 """
 Client portal — read-only, scoped client view (see docs/CLIENT_PORTAL.md).

-M1: a client opens a magic URL (/portal/enter/{token}) which mints a signed
-session cookie, then sees their locations (overview) and per-location read-only
-live data sourced from SLMM's cache. Every data route re-checks ownership.
+A client opens a per-project secure link (/portal/p/{link_token}), enters the
+shared password, and gets a signed session cookie scoped to that project; they
+then see that project's locations (overview) and per-location read-only live
+data sourced from SLMM's cache. Every data route re-checks ownership.
 """

 import os