Admin Quickstart — Bring up the BFF
Goal: verify a working BFF stack in one pass.
Checklist
-
Start stack (compose or k8s)
- Traefik reachable; BFF running; IdP, Redis healthy
-
Health checks
curl -f http://localhost:8000/healthcurl -f http://localhost:8080/ping
-
Same‑origin SPA flow
- Visit SPA host; call
/api/**→ 401 JSON (+ CORS in dev) - Go to
/auth/login→ redirect to IdP →/auth/callback→ cookie set - Repeat
/api/**→ 200 JSON
- Visit SPA host; call
-
ForwardAuth (if enabled)
curl -i https://api.ocg.../auth/forward→ 401 unauthenticated- With session cookie → 200 and auth headers
-
PDP mapping sanity
- Confirm your endpoint appears in
pdp.yaml:endpoint_mapand allows the action
- Confirm your endpoint appears in
Developer SDKs
- Python and JS SDKs:
/docs/sdks/index.md. Link there for client install and API usage examples instead of inlining code in how‑tos.
If any step fails, see Runbooks and QA Test Execution.