Ruben FiszelandClaude Opus 4.8 ea8734a5b6 fix: give the guest JWKS https-required refusal its own clear error ...

An http:// JWKS URL without the opt-in returned the shared DisallowedScheme,
whose message says "only http and https are permitted" — rejecting http while
saying it is allowed. Add a distinct HttpsRequired variant ("URL must use
https"), correct validate_guest_jwks_url's doc (the flag now opts in the scheme
too, not just private ranges), and note in the Guests card that a JWKS URL must
be https.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VF3v6LA9399gNphmZaHYG3

2026-09-04 18:04:49 +02:00

..

examples

fix: enrich OTEL log records with per-request LogContext (#8812)

2026-04-13 21:50:50 +00:00

src

fix: give the guest JWKS https-required refusal its own clear error

2026-09-04 18:04:49 +02:00

tests

fix: let a principal without a login account own a draft (#10925)

2026-09-01 23:42:08 +02:00

Cargo.toml

fix: accept any PEM wrapping for the guest key, keep the public-key check

2026-09-04 10:30:46 +02:00