endorser-authentication #2

2026-07-10T13:09:54Z

jose commented

2026-07-10 13:09:54 +00:00

No description provided.

jose added 6 commits 2026-07-10 13:09:54 +00:00

feat(config): add ENDORSER_URL for upcoming Endorser auth 0758c4192f

Expose the Endorser API base URL from the environment (defaulting to production) so later auth work can call it without hardcoding.

feat(endorser): add client helper to check JWT via rateLimits e5415280bd

Introduce checkAuth so callers can verify Endorser acceptance of a JWT without dealing with HTTP details.

feat(auth): require Endorser verification on device registration 764c89c071

Gate /notifications/register on Endorser JWT acceptance while leaving the local testMode bypass unchanged.

feat(auth): share Endorser verification across register and refresh f2f0732ef5

Extract requireEndorserAuth middleware and apply it to /notifications/refresh so both endpoints use the same check while keeping the local test bypass.

fix(auth): distinguish Endorser unavailability from auth rejection 2343cece5c

Return 503 when Endorser cannot be reached and keep 401 for rejected JWTs, with clearer server-side diagnostics and generic client messages.

docs: document Endorser auth flow and ENDORSER_URL 9634c3422e

Describe when register/refresh verify with Endorser, keep the testMode bypass notes, and list ENDORSER_URL in the env table.

jose merged commit c4f34c8882 into master

2026-07-16 12:32:40 +00:00

jose referenced this issue from a commit

2026-07-16 12:32:41 +00:00

Merge pull request 'endorser-authentication' (#2) from endorser-authentication into master

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: trent_larson/notification-wakeup-service#2