diff options
| author | Adam Soltys <[email protected]> | 2026-06-27 23:08:36 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-06-27 23:08:36 -0700 |
| commit | 45e6e21024e6a8491fa07f53b931263cdeac3d8b (patch) | |
| tree | b625ff73bdddf118aeb174f0733be00e4d97fe0c /compose.yml.sample | |
| parent | ea23e9a5ba360ab77a16dfb8e48e5b2471fee8c4 (diff) | |
| download | coinos-server-45e6e21024e6a8491fa07f53b931263cdeac3d8b.tar.gz coinos-server-45e6e21024e6a8491fa07f53b931263cdeac3d8b.zip | |
auth: hard-evict banned accounts at the JWT layer
Add an `evicted` set check in the JWT strategy: an evicted account fails
authentication on every request and every endpoint, regardless of source
IP. The existing blacklist only blocks sends, so a compromised/abusive
JWT could still authenticate and read/probe; eviction kills it outright.
Matches on uid or username so a rename can't evade it.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
Diffstat (limited to 'compose.yml.sample')
0 files changed, 0 insertions, 0 deletions