fix(b2b_learner_records): verify the bearer JWT instead of trusting X-Userinfo - #69

Open

blarghmatey wants to merge 6 commits into

mainfrom

learner-records-jwt-verify

Commits on Sep 30, 2026

fix(b2b_learner_records): verify the bearer JWT instead of trusting X-Userinfo

blarghmatey
and
claude
authored
5984530
docs(openapi): say the service verifies the token, not only the gateway

blarghmatey
and
claude
authored
8e45b88
fix(b2b_learner_records): harden the JWKS cache and check the token class

blarghmatey
and
claude
authored
3fca6e9
fix(b2b_learner_records): don't start the kid cooldown on a failed refetch

blarghmatey
and
claude
authored
6acce6b
fix(b2b_learner_records): return the error code the contract has always required

blarghmatey
and
claude
authored
8520093
test(b2b_learner_records): reconcile with the per-tenant spec work on main

blarghmatey
and
claude
authored
544fdd5