Admin Bot f32ff08365 fix: accept any Authentik provider issuer in JWT validation ...

- isValidIssuer() accepts portfolio-agent, memory-agent, api-gw, etc.
- All Authentik providers use same signing key (JWKS valid)
- CheckPermissions now checks both 'permissions' (users) and 'roles' (service accounts)
- Fixes JWT issuer mismatch for portfolio-agent, memory-agent tokens

2026-09-05 06:02:11 -07:00

..

jwt_test.go

fix: Lazy-load JWKS in JWT validator + add unit tests

2026-08-27 15:13:49 -07:00

jwt.go

fix: accept any Authentik provider issuer in JWT validation

2026-09-05 06:02:11 -07:00