Issue daemon auth tokens (mdt_) on pairing session claim, bound to workspace_id + daemon_id with 1-year expiry. Add DaemonAuth middleware that validates these tokens and falls back to JWT/PAT for backward compatibility. Apply middleware to all daemon routes except pairing endpoints. |
||
|---|---|---|
| .. | ||
| auth.go | ||
| auth_test.go | ||
| daemon_auth.go | ||
| request_logger.go | ||
| workspace.go | ||