Fix missing expiration checks - #316

Merged

aojea merged 7 commits into

google:mainfrom

Aug 26, 2026

Commits on Aug 25, 2026

node: enforce biscuit expiration in SamNode.Authorize
aojea
committed
efb2fc0
controlplane: make biscuit TTL admin-configurable and cap it to the OIDC token's expiry
aojea
committed
22cf927

Commits on Aug 26, 2026

identity: centralize biscuit expiry enforcement and apply it on peer admission
aojea
committed
aeea471
controlplane: cap refreshed biscuits at the end of the OIDC session
aojea
committed
444d76f
tests: cover the #296 flow end to end
aojea
committed
7f056b4
identity: enforce biscuit expiry when extracting a peer ID, and drop banned peers from the relay ACL
aojea
committed
64530d2
node: expire cached peer admissions instead of trusting them forever
aojea
committed
61d2fc7