Files
rose-ash/lib/identity
giles ac63501266
Some checks failed
Test, Build, and Deploy / test-build-deploy (push) Failing after 33s
identity: opaque grant-backed tokens — issue/introspect/revoke (9 tests)
Token table is a process; the token is an opaque make_ref carrying no
information. introspect() is a live table lookup every time, so
revocation is real (RFC 7009 §2): a revoked token reads {inactive} on
the next introspection with no validity window. Reply shapes follow
RFC 7662 §2.2 ({active, Subject, Client, Scope} / {inactive}).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-06 23:48:30 +00:00
..