e8a96725
bearer: mint the internal authorization through internalauth
This package assembled the header by hand — json.Marshal of an auth.InternalAuth plus "Internal " and a fernet seal — two files away from the package whose whole purpose is to hold both ends of that handshake. It is the same drift internalauth was hoisted to end, sitting inside the library that hoisted it: a change to the payload shape here would have gone unnoticed by every Guard on the instance until a revocation check started failing.
Eugene Blikh <bigbes@gmail.com> — 2026-08-08 21:45:12 UTC
Commit e8a9672594733218fd773bab9e9216ae1c2db6c2 —
view raw patch
Parent(s):
b6bf6d28
| File | Status | + | − |
|---|---|---|---|
bearer/bearer.go
|
M | +8 | -4 |