🔧 DEBUG MODE ACTIVE
⚠️ Debug endpoints are accessible. Exact coordinates visible in responses.
🛡️ Track A Security
Loading...
Debug Features
Loading...
Privacy Status
Loading...
System Info
Loading...
🔐 Security Verification
DEBUG ONLY
Run security tests to verify auth/prod/debug/jitter claims at runtime.
🔒 Discovery requires auth + adult
Click "Run Test" to verify
🚫 Debug endpoints 404 when debug=0
Click to see manual verification steps
🛡️ Production refuses DEBUG=1
Click to verify guard is present
🎯 Jitter consistency + rotation
Click "Run Test" to verify jitter behavior
📍 Location at rest is coarse
Click "Run Test" to verify DB stores coarse coords only
👁️ No lastLocAt exposure
Click "Run Test" to verify lastLocAt not in discovery
📝 AuditLog no coords
Click "Run Test" to verify audit log stores no coords
🔧 Debug no real user leak
Click "Run Test" to verify debug endpoints don't leak
🔐 Token hashing (no plaintext)
Click "Run Test" to verify tokens stored as hashes
📋 Log redaction
Click "Run Test" to verify log redaction
🌶️ Pepper configured
Click "Run Test" to verify token pepper
🔄 Logout/Rotate
Click "Run Test" to verify token invalidation
⏱️ Location TTL
Click "Run Test" to verify LOCATION_STALE
📦 Data Export
Click "Run Test" to verify export/delete
🛡️ Nginx Headers
Click "View Info" to see security headers
Summary
🧪 Test Lab
Seed test users and content for development. "Login as" switches your token.
🔑 Login As
👤 User
Not logged in
🔒
Login Required
Login to access discovery features.
You must be 18+ to use this service.
🗺️ Map
Enable location to see nearby content
🎯 Interests
Loading...
✏️ Creator (Stage 5)
Requires Stage 5
📋 My Defaults
Audience: -
Reach: - km
TTL: - days
Type: -
➕ Create Content
Location: -, -
Preview
📦 My Content
Click refresh to load