Reject non-plaintext credential tokens before pool entry - #49

Merged

maiphucgiang merged 6 commits into

mainfrom

fix/reject-encrypted-auth-tokens

Sep 29, 2026

Commits on Sep 28, 2026

Reject non-plaintext credential tokens at pool entry
maiphucgiang
committed
db58615
Reject envelope refresh tokens and token aliases at import validation
maiphucgiang
committed
c6c6d3e
Prune invalid-credential path suppression when files vanish
maiphucgiang
committed
d3bc729
Key invalid-file suppression to content, not path presence
maiphucgiang
committed
5a89a03
Evict pooled entries whose files are replaced by envelopes
maiphucgiang
committed
4076b4a
Retry configured credential paths after rejection or eviction
maiphucgiang
committed
e301825