Support hashed remoteStorage access tokens #14

Merged
raucao merged 1 commits from feature/hashed_rs_access_tokens into master 2026-11-04 05:58:46 +00:00
Owner

Adds a hashed_access_tokens config option (RS_HASHED_ACCESS_TOKENS) that hashes the presented bearer token and looks up its SHA256 digest first, falling back to the plaintext key when no digest matches. When disabled (the default), the lookup is unchanged, so deployments not using hashed tokens pay no extra Redis round-trips.

Related: kosmos/akkounts#259.

Tests: 60 runs, 0 failures.

Adds a `hashed_access_tokens` config option (`RS_HASHED_ACCESS_TOKENS`) that hashes the presented bearer token and looks up its SHA256 digest first, falling back to the plaintext key when no digest matches. When disabled (the default), the lookup is unchanged, so deployments not using hashed tokens pay no extra Redis round-trips. Related: kosmos/akkounts#259. Tests: 60 runs, 0 failures.
raucao force-pushed feature/hashed_rs_access_tokens from 679a7f164c to ac3adb5635 2026-11-04 05:52:57 +00:00 Compare
raucao added 1 commit 2026-11-04 05:57:02 +00:00
Support hashed remoteStorage access tokens
CI / test (pull_request) Successful in 21s
6d8394d970
Add a hashed_access_tokens config option (env RS_HASHED_ACCESS_TOKENS) that hashes the presented bearer token and looks up its SHA256 digest first, falling back to the plaintext key when no digest matches. When disabled (the default), the lookup is unchanged.

Related: kosmos/akkounts#259.
raucao force-pushed feature/hashed_rs_access_tokens from ac3adb5635 to 6d8394d970 2026-11-04 05:57:02 +00:00 Compare
raucao added the featuresecurity labels 2026-11-04 05:58:12 +00:00
raucao merged commit b81015db7a into master 2026-11-04 05:58:46 +00:00
raucao deleted branch feature/hashed_rs_access_tokens 2026-11-04 05:58:46 +00:00
Sign in to join this conversation.