Jakub Zych c49983d3f8 fix(cabana): the backend middleware refuses a dispatch marker carrying a frontend principal ...

- cabana wraps the bouncer backend guard middleware: a marker that lists the
  backend guard with Backend false answers 401 before the guard honours it,
  as ResolveBackend already does, so a frontend user id is never read as an
  administrator's by the admin API or a backend-guarded plugin route
- found by plan 19.7-05's TestDispatchMarker (admin API in-process case)

2026-10-23 13:27:25 +02:00

44 KiB

Raw Blame History

View Raw