pocket-id

mirror of https://github.com/pocket-id/pocket-id.git synced 2026-08-24 21:17:31 +00:00

Files

T

History

Alessandro (Ale) Segala ee357153f2 feat: support JWT bootstrap and CLI access to a standalone Francis runtime

Pocket ID can now authenticate to a standalone runtime with a JWT as well
as a pre-shared key: FRANCIS_HOST_JWT carries the token inline, while
FRANCIS_HOST_JWT_FILE keeps a path that Francis re-reads on every
connection, so a rotated token (a Kubernetes projected service account
token, say) is picked up without a restart. Exactly one bootstrap method
must be configured, which the config validates up front.

The one-time-access-token command works against a standalone runtime
again. It has no actor host of its own, so it joins the cluster as a
client-only host for just long enough to write the token: that hosts no
actor, so the runtime never places one on it, and it disconnects before
the command returns.

2026-08-17 17:16:42 +00:00

claims.go

refactor: use fosite for OAuth 2.0 logic (#1520 )

2026-06-22 18:42:02 +02:00

env_config_test.go

feat: support JWT bootstrap and CLI access to a standalone Francis runtime

2026-08-17 17:16:42 +00:00

env_config.go

feat: support JWT bootstrap and CLI access to a standalone Francis runtime

2026-08-17 17:16:42 +00:00

internal_errors.go

refactor: use actors for db configuration (#1604 )