konrad and Cursor
b4281445cc
Document every exported symbol and how callers use the library.
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-29 19:25:45 +02:00
konrad and Cursor
bffc0c1a4d
Assert the gRPC user token includes the username.
...
The interceptor already copies preferred_username; the test now checks it.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-28 18:05:44 +02:00
konrad and Cursor
b344df5c1b
Check the same user token on gRPC as on HTTP.
...
Microservices can forward the raw bearer from the interceptor context.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-28 17:37:08 +02:00
konrad and Cursor
f082561cc6
Mint and verify short-lived RS256 user tokens.
...
ExApps sign after AppAPI auth; Microservices check a static public key or an OIDC issuer and forward the same bearer.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-28 14:03:52 +02:00
konrad
92feaa6915
Initial commit
2026-09-28 13:35:12 +02:00