moebiusband 153ecb6dff Bound JWT token cache and document auth model ...

The per-handler JWT validation cache was never pruned, so a long-running
process accumulated one map entry per distinct rotating token, growing
without bound (a slow memory leak / DoS vector). Evict stale entries on
the cache-miss path and cap the cache at maxTokenCacheSize, clearing it
if eviction of expired tokens cannot free space.

Also document in the README that auth verifies only the token signature
and expiry (claims/roles are not enforced) and that an empty
jwt-public-key disables authentication entirely.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-13 10:44:06 +02:00

..

api.go

Upgrade dependencies. Prepare 1.5.0 release

2026-03-06 12:12:41 +01:00

authentication.go

Bound JWT token cache and document auth model

2026-07-13 10:44:06 +02:00

docs.go

Upgrade dependencies. Prepare 1.5.0 release

2026-03-06 12:12:41 +01:00

metricstore.go

Upgrade dependencies. Prepare 1.5.0 release

2026-03-06 12:12:41 +01:00

nodeprovider.go

Run go fix tool. Refactor

2026-03-04 11:07:05 +01:00

server.go

Port to newest cclib. Use metricstore as library.

2026-01-26 09:59:29 +01:00