2d9a547c
auth: harden grants structure
This replaces the Access map with a data type whose default value does not grant any permissions, so that it's more difficult to create an insecure auth context by mistake.
Drew DeVault <sir@cmpwn.com> — 2021-08-25 08:56:27 UTC
Commit 2d9a547c395c1e82ddde6ed5c47312037a07996a —
view raw patch
Parent(s):
cdb177bb
| File | Status | + | − |
|---|---|---|---|
auth/bearer.go
|
M | +45 | -3 |
auth/middleware.go
|
M | +3 | -3 |
server/directives.go
|
M | +3 | -9 |