1 Commits

Author	SHA1	Message	Date
lilleman	c8b56b85eb	JWT session middleware (todo §4); authenticate(): verify the session cookie via cached JWKS (key by kid) → exp/nbf/iss/aud claims (clock skew) → ctx.user/roles; iss/aud opt-in; fail-closed	2026-06-18 09:53:37 +02:00