konradandCursor
f082561cc6
ExApps sign after AppAPI auth; Microservices check a static public key or an OIDC issuer and forward the same bearer. Co-authored-by: Cursor <cursoragent@cursor.com>
11 lines
472 B
Go
11 lines
472 B
Go
// Package usertoken mints and checks the short-lived RS256 user token an ExApp
|
|
// sends to Microservices.
|
|
//
|
|
// An ExApp calls [NewSignerFromEnv] and [Signer.Mint] after AppAPI has named
|
|
// the user. A Microservice calls [FromEnv] and [Auth.Middleware]. One process
|
|
// trusts either a static public key or an OIDC issuer, not both.
|
|
//
|
|
// The procedure, claims, and environment variables are in
|
|
// knowledge/platforms/nextcloud/exapps/authentication.md.
|
|
package usertoken
|