Commit Graph
2 Commits
Author SHA1 Message Date
konradandCursor b344df5c1b Check the same user token on gRPC as on HTTP.
Microservices can forward the raw bearer from the interceptor context.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-28 17:37:08 +02:00
konradandCursor f082561cc6 Mint and verify short-lived RS256 user tokens.
ExApps sign after AppAPI auth; Microservices check a static public key or an OIDC issuer and forward the same bearer.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-28 14:03:52 +02:00