-
feat: JWT Token-based authentication for production (Release mode)
gitea-actions
released this
2026-08-17 23:56:36 +09:00 | 16 commits to main since this release- Implemented JwtAuthenticationHandler for Bearer token validation
- Created LoginEndpoint for JWT token issuance (POST /api/auth/login)
- Added JWT configuration to appsettings.json (Key, Issuer, Audience, ExpirationMinutes)
- Updated Program.cs to use JWT authentication in Release mode (replaces FailClosedAuthenticationHandler)
- Registered System.IdentityModel.Tokens.Jwt NuGet package
- Token validation includes issuer, audience, expiration, and configurable clock skew
- Backward compatible: Development mode continues to use DevelopmentHeaderAuthenticationHandler
This enables production deployments to use standard JWT-based authentication instead of rejecting all requests.
Co-Authored-By: Claude Haiku 4.5 noreply@anthropic.com
Downloads