Skip to content

graft-auth: read a token's claims for display without verifying it (WI-2537) - #260

Merged
thedancingdeveloper merged 1 commit into
mainfrom
wi-2537-token-claims
Oct 26, 2026
Merged

thedancingdeveloper merged 1 commit into
mainfrom
wi-2537-token-claims

Conversation

@thedancingdeveloper

Copy link
Copy Markdown
Contributor

Interface for graft doctor (WI-2537). Reads a token's expiry and scopes for display only: it never verifies the token, and never returns, logs or Debug-prints the token. Author: Opus worker ses_01M5W5MCQSJYVXF82W93R0XZGY.

🤖 Generated with Claude Code

Decodes the payload without checking the signature, expiry or
revocation. Display only; never for authorization. Errors never echo
the token. Encoding and golden vectors unchanged.

Graft-Work-Item: WI-2537
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@thedancingdeveloper
thedancingdeveloper added this pull request to the merge queue Oct 26, 2026
Merged via the queue into main with commit efad679 Oct 26, 2026
6 checks passed
@thedancingdeveloper
thedancingdeveloper deleted the wi-2537-token-claims branch October 26, 2026 13:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant