c5355d17
server: let AUTH_INTERNAL access @anoninternal
Both methods enforce the internal aspect, but @anoninternal really just means the resolver does not require an "authenticated user" context, which means it's still perfectly safe if there is one. With this in place, any resolver that may have to be called from an anonymous context can be switched from @internal to @anoninternal without breaking existing users. Of course it can only be switched if it really does not require a user context.
Conrad Hoffmann <ch@bitfehler.net> — 2025-11-25 10:49:37 UTC
Commit c5355d172f2294af4dd172c2bba8f9d2b3418b35 —
view raw patch
Parent(s):
50a876e1
| File | Status | + | − |
|---|---|---|---|
auth/middleware.go
|
M | +3 | -2 |
server/directives.go
|
M | +4 | -4 |