Commit Graph
5 Commits
Author SHA1 Message Date
konradandCursor b4281445cc Document every exported symbol and how callers use the library.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-29 19:25:45 +02:00
konradandCursor bffc0c1a4d Assert the gRPC user token includes the username.
The interceptor already copies preferred_username; the test now checks it.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-28 18:05:44 +02:00
konradandCursor b344df5c1b Check the same user token on gRPC as on HTTP.
Microservices can forward the raw bearer from the interceptor context.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-28 17:37:08 +02:00
konradandCursor f082561cc6 Mint and verify short-lived RS256 user tokens.
ExApps sign after AppAPI auth; Microservices check a static public key or an OIDC issuer and forward the same bearer.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-28 14:03:52 +02:00
konrad 92feaa6915 Initial commit 2026-09-28 13:35:12 +02:00