scriptoriumadmin/fabro
1
0
Fork 0
mirror of https://github.com/fabro-sh/fabro.git synced 2026-09-14 23:22:51 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
fabro/crates/arc-api
History
Bryan Helmkamp fca63cb2e7 Enforce allowed_usernames at arc-api level via JWT sub claim 
The API now extracts the GitHub username from the JWT sub claim
(last path segment of the profile URL) and checks it against
allowed_usernames from arc.toml. Fails closed: empty allowed list
or missing sub claim returns 403.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-03 16:33:04 -05:00
..
src Enforce allowed_usernames at arc-api level via JWT sub claim 2026-03-03 16:33:04 -05:00
tests Add demo API server and wire React app to fetch from API 2026-03-02 09:39:53 -05:00
Cargo.toml Support base64-encoded PEM for ARC_JWT_PUBLIC_KEY and ARC_JWT_PRIVATE_KEY 2026-03-03 14:39:49 -05:00