Kyle Isom 8c654a5537 Accept MCIAS JWT tokens as passwords at token endpoint ...

The /v2/token endpoint now detects when the password looks like a JWT
(contains two dots) and validates it directly against MCIAS before
falling back to the standard username+password login flow. This enables
non-interactive registry auth for service accounts — podman login with
a pre-issued MCIAS token as the password.

Follows the personal-access-token pattern used by GHCR, GitLab, etc.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-28 15:13:27 -07:00

..

auth

Migrate module path from kyle/ to mc/ org

2026-03-27 02:05:59 -07:00

config

Migrate module path from kyle/ to mc/ org

2026-03-27 02:05:59 -07:00

db

Migrate module path from kyle/ to mc/ org

2026-03-27 02:05:59 -07:00

gc

Phase 9: two-phase garbage collection engine

2026-03-19 20:27:17 -07:00

grpcserver

Migrate module path from kyle/ to mc/ org

2026-03-27 02:05:59 -07:00

oci

Migrate module path from kyle/ to mc/ org

2026-03-27 02:05:59 -07:00

policy

Allow all authenticated users to push/pull (not just human+user role)

2026-03-25 23:02:53 -07:00

server

Accept MCIAS JWT tokens as passwords at token endpoint

2026-03-28 15:13:27 -07:00

storage

Phase 9: two-phase garbage collection engine

2026-03-19 20:27:17 -07:00

webserver

Migrate module path from kyle/ to mc/ org

2026-03-27 02:05:59 -07:00