When a Bearer token is a valid session ID (base32, 103 chars), the JWT middleware now silently hands off to the session store instead of logging a misleading "bad JWT claims" error. Also exports IsValidSessionID from the session store package and derives the session ID length from a constant tied to the key size in the usecase package, removing the hardcoded 103. |
||
|---|---|---|
| .. | ||
| sessions.go | ||
| sessions_test.go | ||