fix(security): authenticate extension services - #2638

Merged

pimlock merged 11 commits into

mainfrom

feat/2623-extension-auth/pimlock

Aug 14, 2026

Commits on Aug 6, 2026

fix(security): authenticate extension services
pimlock
committed
bc88307
feat(extension-core): verify gateway JWTs
pimlock
committed
9989e92

Commits on Aug 7, 2026

Commits on Aug 13, 2026

chore: merge main into extension authentication
pimlock
committed
688b51e
fix(extension-auth): clarify verification contract
pimlock
committed
27a21d9
docs(core): update middleware manifest example
pimlock
committed
ca8cbf4

Commits on Aug 14, 2026

fix(extension-auth): preserve unsigned gateway compatibility
pimlock
committed
dfe26f8
fix(extension-auth): reject cross-domain token replay
pimlock
committed
5569cca