coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(registrar): assign State Hub identifiers
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02e47-6aac-7ee1-914d-0584c75d3c81
This commit is contained in:
repo-manager 2026-08-23 13:21:43 +02:00
parent 46ba7a340c
commit 4c3c528644
3 changed files with 14 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

3
workplans/FLEX-WP-0018-inbound-auth-corrections.md
View file

@ -11,6 +11,7 @@ planning_priority: P2
planning_order: 118
created: "2026-08-23"
updated: "2026-08-23"
state_hub_workstream_id: "8f301c7c-e3e2-5bd0-a6f2-0cb92c1d782f"
---
## Classify rejected TokenReview credentials as unauthenticated
@ -19,6 +20,7 @@ updated: "2026-08-23"
id: FLEX-WP-0018-T01
status: done
priority: medium
state_hub_task_id: "4a85c91f-6f34-5224-99b0-23b8eaa3bf7b"
```
Treat a successful TokenReview response that rejects a bearer token as an
@ -32,6 +34,7 @@ and authenticator seam.
id: FLEX-WP-0018-T02
status: done
priority: low
state_hub_task_id: "5613aeb1-ad09-50e5-9933-ced39593dc54"
```
Document that caller-authenticated pins permit TCP 443 and 6443 without a