feat(auth): split bearer auth into worker and maintainer token tiers - #1122

Merged

joryirving merged 12 commits into

mainfrom

courier/misospace/dispatch/issue-1111

Sep 28, 2026

Commits on Sep 28, 2026

feat(auth): split bearer auth into worker and maintainer token tiers (#1111)
Courier
committed
1ba63f7
fix(auth): keep prisma out of client bundles by extracting auth-mode module
Courier
committed
2ba976e
fix(auth): address AI review findings on tier enforcement
Courier
committed
0ba1388
fix(auth): harden tier-denial audit throttling per review
Courier
committed
fed0de2
Merge remote-tracking branch 'origin/main' into courier/misospace/dispatch/issue-1111
Courier
committed
77b4cd6
fix(auth): accept tier bearer tokens in middleware; drop unclaim header guard
Courier
committed
433924f
Merge remote-tracking branch 'origin/main' into courier/misospace/dispatch/issue-1111
Courier
committed
5119ba2
fix(auth): fail closed on cross-tier token collisions
Courier
committed
97a0626
test(auth): lock worker-tier enforcement in basic and oidc modes
Courier
committed
d244d6b
test(auth): failure-inject the best-effort tier-denial audit path
Courier
committed
3de0eb3
test(auth): reset-proof limiter mock and route-level denial audit tests
Courier
committed
4ad8a40
test(auth): assert denial audit payloads and flush one-shot limiter overrides
Courier
committed
a9c86e6