2 Commits

Author	SHA1	Message	Date
lilleman	24eb6b1c68	JWKS fetch + cache + rotation (todo §4); cachingJwks: TTL cache + rotation-on-miss reload (throttled, last-good on error), createJwksProvider routes file/base64/http + primes at boot	2026-06-18 10:01:40 +02:00
lilleman	c8b56b85eb	JWT session middleware (todo §4); authenticate(): verify the session cookie via cached JWKS (key by kid) → exp/nbf/iss/aud claims (clock skew) → ctx.user/roles; iss/aud opt-in; fail-closed	2026-06-18 09:53:37 +02:00