mlsmaycon 35587bdfeb [management] Split ValidateSession into named checks ...

The account status gate pushed ValidateSession to 115 lines of code, past
the 100 the quality gate allows. Session token verification and the checks
that run against a user of the service's own account move into named
helpers, and the denials raised before a user is resolved share one
constructor.

An account mismatch keeps its bare response: the user belongs to a
different account, so none of their identity belongs in an answer to this
service's proxy.

Tests assert denied reasons through the package constants, with the wire
values pinned in one place so a rename has to be deliberate.

2026-08-08 04:48:12 +00:00

..

configs

[management] restructure api files (#3013)

2024-12-10 15:59:25 +01:00

handlers

[management] Split ValidateSession into named checks

2026-08-08 04:48:12 +00:00

middleware

[management] detach JWT group sync write from request cancellation (#6621)

2026-07-01 14:53:13 +02:00

testing

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00

handler.go

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00