feat(auth): bind a JWKS key to the tenants it may sign for - #18

Merged

Optale-ops merged 2 commits into

mainfrom

security/jwt-key-tenant-binding

Oct 4, 2026

Commits on Oct 4, 2026

feat(auth): bind a JWKS key to the tenants it may sign for
Optale-ops
committed
cb089f3
fix(auth): bound keys require a signed tenant_id and cannot be replaced
Optale-ops
committed
25ea2c8