raucao
6d8394d970
CI / test (pull_request) Successful in 21s
Add a hashed_access_tokens config option (env RS_HASHED_ACCESS_TOKENS) that hashes the presented bearer token and looks up its SHA256 digest first, falling back to the plaintext key when no digest matches. When disabled (the default), the lookup is unchanged. Related: kosmos/akkounts#259.