Repository navigation

Issue short-lived user access tokens to trusted backends - #606

Open

nygrenh wants to merge 8 commits into

user-access-tokens-for-handoffs

Open

Issue short-lived user access tokens to trusted backends#606
nygrenh wants to merge 8 commits into
masterfrom
user-access-tokens-for-handoffs

Commits on Nov 2, 2026
- Issue short-lived user access tokens to trusted backends
  nygrenh
  committed
  4e8ec50
- Refuse revoked and expired tokens with 401
  nygrenh
  committed
  c8ad7f7
- Keep handoff tokens from changing credentials or deleting accounts
  nygrenh
  committed
  caa6ae9
- Filter client secrets and tokens from request logs
  nygrenh
  committed
  fa4c4e6
- Expire issuer tokens, throttle issuing and refuse public credentials
  nygrenh
  committed
  1d12838
Commits on Nov 3, 2026
- Refuse privileged users and non-confidential apps for handoff tokens
  nygrenh
  committed
  39d229e
Commits on Nov 4, 2026
- Throttle normalized paths and check handoff tokens everywhere
  nygrenh
  committed
  9241fe2
- Keep issued user access tokens out of caches
  nygrenh
  committed
  fd3778e