Kyle Isom 7f9e7f433f Treat authenticated callers with no roles as service accounts ...

MCIAS service tokens have nil roles and may not return account_type
in the validate response. Recognize authenticated callers with a
username but no roles as service accounts for IsUser() purposes.
Explicit guest role still blocks access.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-25 20:19:14 -07:00

..

ca

Fix ECDH zeroization, add audit logging, and remediate high findings

2026-03-17 14:04:39 -07:00

sshca

Fix ECDH zeroization, add audit logging, and remediate high findings

2026-03-17 14:04:39 -07:00

transit

Fix ECDH zeroization, add audit logging, and remediate high findings

2026-03-17 14:04:39 -07:00

user

Fix ECDH zeroization, add audit logging, and remediate high findings

2026-03-17 14:04:39 -07:00

engine_test.go

Fix all errcheck linter issues

2026-03-15 10:36:35 -07:00

engine.go

Treat authenticated callers with no roles as service accounts

2026-03-25 20:19:14 -07:00

helpers.go

Merge transit engine branch, resolve conflicts in shared files

2026-03-16 19:50:47 -07:00