3 Commits

Author	SHA1	Message	Date
Jakub Zych	9eedfbbb29	feat(pact): add HasFrontendTokenScopes and the shared ValidTokenScopeName rule (E-2) ... - pact.FrontendTokenScope and pact.HasFrontendTokenScopes declare member (usr_) token scopes; the admin token catalog never reads them - pact.ValidTokenScopeName carries cabana's scope-name pattern; cabana's g15_ catalog switches to it with unchanged behaviour and messages	2026-10-23 16:15:25 +02:00
Jakub Zych	ffdb5d00ca	feat(16.3-01): account token API with OpenAPI and phrase keys ... - Add list/create/revoke/scopes handlers, validation, and soft revoke - Regenerate admin OpenAPI and TS types; inventory and conformance cases - Add server-side api_tokens phrase keys (en/pl) Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-11 01:51:11 +02:00
Jakub Zych	b9273c1da7	feat(16.3-01): tracer — g15_ token scopes through composite backend guard ... - Add pact.TokenScope/HasTokenScopes and bouncer.ScopeLimit on Principal - Append backend_api_tokens migration; Allows evaluates scope before superuser - Composite guard routes Bearer g15_… to token lookup; smoke tests cover path Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-11 01:46:32 +02:00