fabro/crates
Bryan Helmkamp fca63cb2e7 Enforce allowed_usernames at arc-api level via JWT sub claim
The API now extracts the GitHub username from the JWT sub claim
(last path segment of the profile URL) and checks it against
allowed_usernames from arc.toml. Fails closed: empty allowed list
or missing sub claim returns 403.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-03 16:33:04 -05:00
..
arc-agent Replace DIY terminal color with console crate 2026-03-03 16:02:10 -05:00
arc-api Enforce allowed_usernames at arc-api level via JWT sub claim 2026-03-03 16:33:04 -05:00
arc-cli Simplify doctor --live: share HTTP client, concurrent LLM probes, extract helper 2026-03-03 16:19:39 -05:00
arc-db Add structured tracing across 7 crates per logging audit plan 2026-03-01 19:43:19 -05:00
arc-devcontainer allow dead code in arc-devcontainer for now 2026-03-03 14:49:22 -05:00
arc-git-storage Add structured tracing across 7 crates per logging audit plan 2026-03-01 19:43:19 -05:00
arc-llm Replace DIY terminal color with console crate 2026-03-03 16:02:10 -05:00
arc-mcp Add structured tracing across 7 crates per logging audit plan 2026-03-01 19:43:19 -05:00
arc-types Add spec-first OpenAPI for arc-api with generated types 2026-03-01 21:43:49 -05:00
arc-util Enforce semantic color scheme across CLI output 2026-03-03 16:09:03 -05:00
arc-workflows Enforce semantic color scheme across CLI output 2026-03-03 16:09:03 -05:00