Jakub Zych b82d85f440 feat: export RequestUser and EndRequestSession for OAuth providers ...

- RequestUser resolves the signed-in user exactly like the jwt guard
  (bearer, token and auth_token cookies, blacklist, tokens_valid_after)
  and returns nil for anonymous or invalid requests
- EndRequestSession blacklists the session JWT and forgets the token
  cookie with the configured cookie attributes, best effort

2026-10-19 18:42:38 +02:00

4.5 KiB

Raw Blame History

View Raw