kolaente 55ea5bd966 refactor(auth): extract shared token validation into auth package ...

Move JWT parsing (GetUserIDFromToken) and API token validation
(ValidateAPITokenString) into pkg/modules/auth so both HTTP middleware
and WebSocket auth use the same logic. This ensures consistent token
validity checks including expiry and user status (disabled/locked).

The HTTP API token middleware now delegates to the shared function,
removing duplicated lookup/expiry logic.

2026-04-02 16:30:23 +00:00

..

ldap

fix(auth): skip profile updates for disabled LDAP users

2026-03-23 16:37:26 +00:00

oauth2server

test: add tests for OAuth 2.0 authorization flow

2026-03-27 23:05:04 +00:00

openid

feat(auth): enforce OpenID Connect issuer uniqueness across providers

2026-03-30 22:41:50 +00:00

auth.go

refactor(auth): extract shared token validation into auth package

2026-04-02 16:30:23 +00:00