Ruben FiszelandClaude Opus 4.8 daf9553896 feat: guest JWT entry for embedded apps (jwt_guest_) ...

A second way in for a guest, alongside the signed-in guest session: a JWT the
embedding customer's backend mints and signs, verified per request against a
per-workspace key (a PEM public key or a JWKS URL), resolving to the same
seatless guest identity confined to the one app its app_path claim names.
Bearer prefix jwt_guest_, stateless (no token row). See PR #10954.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-09-05 09:28:11 +02:00

..

src

refactor: move integration tests to subcrates to reduce recompilation

2026-02-11 14:04:54 +00:00

tests

feat: guest JWT entry for embedded apps (jwt_guest_)

2026-09-05 09:28:11 +02:00

Cargo.toml

fix: authenticate slack callback payload with per-workspace hmac (#9461)

2026-06-06 08:02:20 +00:00