permadeath.com / didbot
Identities for entities did.bot
agent llm did
Star
Fork 0
Watch

fix(oauth)!: ask the gate before fetching a client_id, and bound the metadata cache master

`POST /oauth/par` fetched a document from a host the unauthenticated caller named before the policy gate was asked, cached every distinct `client_id` in a map nothing evicted, and reached loopback on any deployment. The gate now judges first, the cache holds at most 512 entries, and only a `.localhost` zone fetches a loopback client. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Change-Id: I6e45f03737f032ac3f9e4890b36eaf71ae4c2ea7

Author permadeath.com Co-author Claude Opus 5 (1M context) Committer Tangled Date Commit 78f1e267 Parent 94280e7f Change ID I6e45f03
+269 -25
5 changed files