2 Commits
Author SHA1 Message Date
konradandCursor bffc0c1a4d Assert the gRPC user token includes the username.
The interceptor already copies preferred_username; the test now checks it.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-28 18:05:44 +02:00
konradandCursor b344df5c1b Check the same user token on gRPC as on HTTP.
Microservices can forward the raw bearer from the interceptor context.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-28 17:37:08 +02:00