From 3b1c61bae2ceb02f1e23369efa765d6fb2ecc531 Mon Sep 17 00:00:00 2001 From: nfel Date: Sun, 30 Aug 2026 15:36:08 +0330 Subject: [PATCH] docs: record JWT verifier injection --- REFACTORING-AUDIT.md | 1 + REFACTORING-TODO.md | 1 + 2 files changed, 2 insertions(+) diff --git a/REFACTORING-AUDIT.md b/REFACTORING-AUDIT.md index 8c948f9..ae4ba7e 100644 --- a/REFACTORING-AUDIT.md +++ b/REFACTORING-AUDIT.md @@ -296,6 +296,7 @@ The current composition root is `cmd/serve.go`; `repository.System` aggregates P - Extracted HTTP bearer-token normalization into `application/auth` and kept JWT verification/error mapping behavior unchanged; focused and full Auth tests pass in `1d72faa`. - Extracted refresh-token marker validation into `application/auth` while preserving refresh-flow behavior; full Auth tests pass in `4225332`. - Added access/refresh JWT verifier contracts and an infrastructure adapter delegating to the existing parser; full Auth tests pass in `ad6f5cc`. Runtime injection into all auth flows remains. +- Injected the verifier into IAM and refresh-token flows through runtime composition, retaining fallback for compatibility; full Auth tests pass in `6c5b8cc`. - A005 remains in progress: JWT validation, session checks, refresh-token flow, and broader authentication orchestration still need application ports and adapters. ### `I001` — publisher-backed ICO purchase map diff --git a/REFACTORING-TODO.md b/REFACTORING-TODO.md index f19373c..00ff8b8 100644 --- a/REFACTORING-TODO.md +++ b/REFACTORING-TODO.md @@ -300,3 +300,4 @@ Append one row whenever a task changes status. Existing rows are never rewritten | 2026-08-30 | A005 | `TODO` | `STARTED` | Extracted bearer-token normalization into `application/auth`; full Auth tests pass in `1d72faa`. | | 2026-08-30 | A005 | `STARTED` | `STARTED` | Extracted refresh-token marker validation into `application/auth`; full Auth tests pass in `4225332`. | | 2026-08-30 | A005 | `STARTED` | `STARTED` | Added application JWT verifier contract and infrastructure adapter for access/refresh claims; full Auth tests pass in `ad6f5cc`. | +| 2026-08-30 | A005 | `STARTED` | `STARTED` | Injected the JWT verifier into IAM and refresh-token flows with compatibility fallback; full Auth tests pass in `6c5b8cc`. |