mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-09-14 23:22:51 +00:00
The API now extracts the GitHub username from the JWT sub claim (last path segment of the profile URL) and checks it against allowed_usernames from arc.toml. Fails closed: empty allowed list or missing sub claim returns 403. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| arc-agent | ||
| arc-api | ||
| arc-cli | ||
| arc-db | ||
| arc-devcontainer | ||
| arc-git-storage | ||
| arc-llm | ||
| arc-mcp | ||
| arc-types | ||
| arc-util | ||
| arc-workflows | ||