IAA BOT
IAA BOT Before Going Live
Test Discord, OAuth, API security, permissions, lookups, workflows, synchronization, and logging.
Before going live#
- Bot starts successfully.
- Discord bot joins both required guilds.
- Required commands appear.
- Website uses HTTPS.
- OAuth login opens and callback succeeds.
- A normal user can authorize and receive authorization status.
- API /health succeeds.
- Invalid API key is rejected.
- Invalid HMAC signature is rejected.
- Expired timestamp is rejected.
- Reused nonce is rejected.
- Staff access works and normal users cannot access staff-only actions.
- Lookup works after authorization.
- Blacklist, investigation, recruitment, merge, alt, punishment, and poach workflows can be submitted.
- Approval or denial synchronizes back correctly.
- OAuth revoke and account-data deletion behavior works.
- Security and review logs function without printing secrets.