history of internal/app/tokens.go at v0.6.0
2026-10-10
| e2c58e1 | fix(app): reserve the token labels owner and root GPG Verified | brice | ||
| 6833c9f | fix(app): cap a web session at its token's expiry and sign out on owner-token revoke GPG Verified | brice | ||
| 857b2f4 | feat(app): limit token list and revoke to the caller's reach, add Auth.Revalidate GPG Verified | brice | ||
| a771dd2 | refactor(app): drop dead crypto/rand error paths and unused helpers GPG Verified | brice | ||
| 851827c | refactor(domain): unexport the principal kind and expose a label GPG Verified | brice | ||
| 2bea74e | feat(app): add token use cases, authentication and token-aware access rule GPG Verified | brice |