mirror of
https://github.com/MODSetter/SurfSense.git
synced 2026-06-28 21:49:40 +02:00
feat: update extension clients for PAT auth
This commit is contained in:
parent
1cc72a47be
commit
8af4a3f9d5
5 changed files with 13 additions and 18 deletions
|
|
@ -22,11 +22,11 @@ import type {
|
|||
*
|
||||
* Auth + wire contract:
|
||||
* - Every request carries `Authorization: Bearer <token>` only. No
|
||||
* custom headers — the backend identifies the caller from the JWT
|
||||
* custom headers — the backend identifies the caller from the PAT
|
||||
* and feature-detects the API via the `capabilities` array on
|
||||
* `/health` and `/connect`.
|
||||
* - 401 surfaces as `AuthError` so the orchestrator can show the
|
||||
* "token expired, paste a fresh one" UX.
|
||||
* "token invalid or expired" UX.
|
||||
* - HealthResponse / ConnectResponse use index signatures so any
|
||||
* additive backend field (e.g. new capabilities) parses without
|
||||
* breaking the decoder. This mirrors `ConfigDict(extra='ignore')`
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue