mrhid6 be4f488db3 feat: Enforce API token scopes from the route map ...

Keyed on the registered gin route pattern rather than a per-route
decorator, because a route registered without a decorator would be
unguarded. An unmapped route reached by a token is a 403, and a boot-time
check refuses to start when any /api route is missing, so the failure
lands at deploy rather than as a customer's surprise 403.

2026-08-12 14:40:00 +00:00

..

cmd

feat: Enforce API token scopes from the route map

2026-08-12 14:40:00 +00:00

internal

feat: Enforce API token scopes from the route map

2026-08-12 14:40:00 +00:00

Dockerfile

fix: give the scratch server image a /tmp for the vulnerability database

2026-08-06 15:46:30 +01:00

go.mod

fix: tidy server go.mod for the vulnerability database dependencies

2026-08-06 15:18:57 +01:00

go.sum

fix: tidy server go.mod for the vulnerability database dependencies

2026-08-06 15:18:57 +01:00