Repository navigation

Accept external access tokens on configured bearer routes - #147

Merged

woksin merged 31 commits into

mainfrom

feature/143-identity-bearer-routes

Oct 2, 2026

Commits on Sep 29, 2026

Accept external access tokens on configured bearer routes
woksin
committed
125ae09
Specify bearer routes end to end against a stub issuer
woksin
committed
6a53ba6
Document bearer routes for external access tokens
woksin
committed
19777ec
Register bearer routes with the ingress pipeline and keep their claims off sessions
woksin
committed
eb1dd55
Refuse a bearer-route token off its routes however the Authorization header is written
woksin
committed
babfc3f
Apply the deployment's claim requirements and identity-verification rule to bearer routes
woksin
committed
3325cce
Refuse bearer-route paths a backend could decode into another path
woksin
committed
ae38965
Specify that ID, HMAC, expiry-less and encrypted tokens are refused
woksin
committed
f9bad99
Specify what bearer and browser routes forward to the backend
woksin
committed
0ab7adc
Specify metadata methods, unreachable issuers and startup refusals
woksin
committed
f344ae4
Refuse bearer-route paths carrying a path parameter
woksin
committed
1528b81
Let a bearer route state which claim requirements apply to its tokens
woksin
committed
bcb7c0c
Make the skipped /.cratis/me veto on bearer routes explicit
woksin
committed
96d819a
Correct the bearer-route docs against what the gate does
woksin
committed
0adb52a
Recognize role claim types case-insensitively on bearer routes
woksin
committed
7ccfa91

Commits on Oct 1, 2026

Commits on Oct 2, 2026