2 Commits

Author	SHA1	Message	Date
Kyle Isom	ceb10ce102	Add AccountType to TokenInfo ... - TokenInfo now includes AccountType ("human" or "system") from the MCIAS validate response - Required for policy engines (MCR, Metacrypt) that match on account type - Mock MCIAS in tests updated to return account_type - New assertion in TestValidateToken verifies AccountType is populated Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-25 17:45:12 -07:00
Kyle Isom	38da2e9a4b	Add auth package: MCIAS token validation with caching ... - Authenticator with Login, ValidateToken, Logout - 30-second SHA-256-keyed cache with lazy eviction - TLS 1.3, custom CA support, service context (name + tags) - Error types: ErrInvalidToken, ErrInvalidCredentials, ErrForbidden, ErrUnavailable - Context helpers for TokenInfo propagation - 14 tests with mock MCIAS server and injectable clock Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-25 14:24:52 -07:00