Repository navigation

Issue short-lived user access tokens to trusted backends - #606

Merged

nygrenh merged 19 commits into

masterfrom

user-access-tokens-for-handoffs

Nov 11, 2026

Merged

Issue short-lived user access tokens to trusted backends#606
nygrenh merged 19 commits into
masterfrom
user-access-tokens-for-handoffs

Commits on Nov 2, 2026
- Issue short-lived user access tokens to trusted backends
  nygrenh
  committed
  4e8ec50
- Refuse revoked and expired tokens with 401
  nygrenh
  committed
  c8ad7f7
- Keep handoff tokens from changing credentials or deleting accounts
  nygrenh
  committed
  caa6ae9
- Filter client secrets and tokens from request logs
  nygrenh
  committed
  fa4c4e6
- Expire issuer tokens, throttle issuing and refuse public credentials
  nygrenh
  committed
  1d12838
Commits on Nov 3, 2026
- Refuse privileged users and non-confidential apps for handoff tokens
  nygrenh
  committed
  39d229e
Commits on Nov 4, 2026
- Throttle normalized paths and check handoff tokens everywhere
  nygrenh
  committed
  9241fe2
- Keep issued user access tokens out of caches
  nygrenh
  committed
  fd3778e
Commits on Nov 11, 2026
- Merge origin/master into user-access-tokens-for-handoffs
  nygrenh
  committed
  0383e61
- Stop throttle param lookups failing on requests without a body type
  nygrenh
  committed
  9e7e0d1
- Type user access token issuing strictly
  nygrenh
  committed
  4e07a59
- Authenticate API specs with real access tokens
  nygrenh
  committed
  d86e737
- Throttle token issues whose user_id cannot be read
  nygrenh
  committed
  62f85ee
- Answer revoked and expired tokens with 401 on API v8
  nygrenh
  committed
  96033fb
- Revoke handoff tokens when their user becomes privileged
  nygrenh
  committed
  4ffddcc
- Delete access tokens a month after they expire or are revoked
  nygrenh
  committed
  92d68b4
- Log refused user access token issues
  nygrenh
  committed
  e27b268
- Test that handoff tokens cannot request account deletion
  nygrenh
  committed
  b1b787c
- Run request, service and background task specs in CI
  nygrenh
  committed
  488d4b0

Commits

Commits on Nov 2, 2026

Commits on Nov 3, 2026

Commits on Nov 4, 2026

Commits on Nov 11, 2026