This is an automated email from the ASF dual-hosted git repository.
lahirujayathilake pushed a change to branch auth-endpoints
in repository https://gitbox.apache.org/repos/asf/airavata-custos.git
was 689e43be7 Drop stale Missing caller header from privilege swag
This change permanently discards the following revisions:
discard 689e43be7 Drop stale Missing caller header from privilege swag
discard ca66ea90e Refresh JWKS on unknown signing key and tighten URL lock
invariant
discard 55e5dad8e Set Vary: Origin on every cross-origin response and cover
with tests
discard bf68d4bb1 Drop custos.yaml.example, fold the one useful hint inline
discard 7a2623d01 Parameterize portal origin in the CORS allowlist
discard 33220e7c8 Sweep remaining swagger annotations to BearerAuth scheme
discard 1360dc0eb Switch swagger annotations to BearerAuth scheme
discard 3598ef533 Inject caller via context in integration test harness
discard 8535531c9 Read caller identity from context, not the user-id header
discard 528905c9a Wire auth and CORS middleware into the server entrypoint
discard 951e060dc Tighten auth error responses to opaque 401
discard ed26a034e Add CORS middleware reading origins from config
discard c3cf8e2f1 Add JWT verification middleware with JWKS discovery
discard b08489cc6 Add pkg/identity for caller context propagation
discard e1d03667f Add auth config block for issuer, audience, JWKS URL
