happyDomain/internal/session
Pierre-Olivier Mercier 07d4c244d1 middleware: skip JWT parsing for session ID tokens to suppress spurious log
When a Bearer token is a valid session ID (base32, 103 chars), the JWT
middleware now silently hands off to the session store instead of logging
a misleading "bad JWT claims" error.

Also exports IsValidSessionID from the session store package and derives
the session ID length from a constant tied to the key size in the usecase
package, removing the hardcoded 103.
2026-04-16 13:41:47 +07:00
..
sessions.go middleware: skip JWT parsing for session ID tokens to suppress spurious log 2026-04-16 13:41:47 +07:00
sessions_test.go middleware: skip JWT parsing for session ID tokens to suppress spurious log 2026-04-16 13:41:47 +07:00