Skip to content

apxlabs-ai/niro-demo-light

Repository files navigation

niro-demo-light

A small FastAPI helpdesk service. Two roles (customer, agent), ticket CRUD, comments, JWT auth.

main is the clean baseline. The feature/ directory holds the next feature as a portable patch — ./feature/run.sh applies it to the working tree; ./feature/cleanup.sh closes any open PRs the run produced.

Run locally

./start.sh           # macOS / Linux
.\start.ps1          # Windows (PowerShell)

Server starts on http://127.0.0.1:8000 and prints → helpdesk ready on http://127.0.0.1:8000 once /health responds. Interactive docs at /docs. Stop with ./stop.sh (or .\stop.ps1 on Windows).

Seeded users

Email Password Role
agent@helpdesk.test agent-pass-1234 agent
alex@customer.test customer-pass-1234 customer
blair@customer.test customer-pass-1234 customer

Log in with POST /auth/login (form fields username, password); attach the returned JWT as Authorization: Bearer <token> on subsequent requests.

Endpoints

Method Path Auth Notes
POST /auth/signup Creates a customer
POST /auth/login Returns JWT
GET /me any user Current user
POST /tickets any user Customer files a ticket
GET /tickets any user Customers see own; agents see all
GET /tickets/{id} owner / agent
PATCH /tickets/{id} agent Set status/priority/assignee
POST /tickets/{id}/comments owner / agent
GET /tickets/{id}/comments owner / agent

About

Self-contained niro pentest demo: clean FastAPI helpdesk baseline + replay fixtures that inject realistic vulnerabilities.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors