common: moduleauth (Modul-Token-Verifier + Bearer-Middleware) #394

Merged
patrick merged 1 commits from feat/common-moduleauth into main 2026-10-28 10:41:07 +01:00
Owner

Vorbereitung fuer B-06 (Workflow auf Bearer-Token).

Aenderung

Neues Paket common/moduleauth, Quelltext aus mail/internal/moduleauth (verifier.go ist byte-gleich zu dms/internal/moduleauth/verifier.go, normalisiert verglichen): Verifier (EdDSA, kid, JWKS-Abruf mit Cache, aud/iss-Bindung), HTTPKeyFetcher, RequireAuth-Middleware (Bearer), Identity im Kontext, Testaussteller NewTestVerifierAndIssuer.

Nicht breaking: reine Ergaenzung. common/MINOR bleibt 2; der Tag-Workflow zaehlt dann innerhalb v0.2.x weiter (v0.3.0 waere nur bei Breaking Change noetig).

Auswirkungsliste

  • Kein bestehendes Modul betroffen. Folgen: mail stellt auf common/moduleauth um (eigener PR), workflow nutzt es fuer Bearer-Auth (B-06). dms hat zusaetzlich eine Middleware mit caller-Uebergangsmodus und bleibt vorerst bei seiner eigenen.

Tests

131, frisches Wurfverzeichnis: build, vet, gofmt, go test ./moduleauth/ ok (Verifier, Signatur, aud-Bindung, abgelaufen).

🤖 Generated with Claude Code

Vorbereitung fuer B-06 (Workflow auf Bearer-Token). ## Aenderung Neues Paket `common/moduleauth`, Quelltext aus `mail/internal/moduleauth` (`verifier.go` ist byte-gleich zu `dms/internal/moduleauth/verifier.go`, normalisiert verglichen): `Verifier` (EdDSA, kid, JWKS-Abruf mit Cache, aud/iss-Bindung), `HTTPKeyFetcher`, `RequireAuth`-Middleware (Bearer), `Identity` im Kontext, Testaussteller `NewTestVerifierAndIssuer`. Nicht breaking: reine Ergaenzung. `common/MINOR` bleibt `2`; der Tag-Workflow zaehlt dann innerhalb v0.2.x weiter (v0.3.0 waere nur bei Breaking Change noetig). ## Auswirkungsliste - Kein bestehendes Modul betroffen. Folgen: mail stellt auf common/moduleauth um (eigener PR), workflow nutzt es fuer Bearer-Auth (B-06). dms hat zusaetzlich eine Middleware mit `caller`-Uebergangsmodus und bleibt vorerst bei seiner eigenen. ## Tests 131, frisches Wurfverzeichnis: build, vet, gofmt, `go test ./moduleauth/` ok (Verifier, Signatur, aud-Bindung, abgelaufen). 🤖 Generated with [Claude Code](https://claude.com/claude-code)
patrick added 1 commit 2026-10-27 23:40:35 +01:00
common/moduleauth: Modul-Token-Verifier (Ed25519, JWKS) und Bearer-Middleware
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Failing after 55s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Successful in 3s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Successful in 3s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Failing after 18s
CI / Web (dms-browser) (push) Failing after 1m18s
CI / Web (pdf-viewer) (push) Failing after 57s
CI / Web (shl) (push) Failing after 11s
Supply-Chain-Scan (Go) / govulncheck (push) Failing after 57s
CI / Core-Modul (Build/Vet/Test) (pull_request) Failing after 1m1s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Successful in 4s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Successful in 4s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Failing after 21s
CI / Web (dms-browser) (pull_request) Failing after 1m16s
CI / Web (pdf-viewer) (pull_request) Failing after 57s
CI / Web (shl) (pull_request) Failing after 11s
common Pflichttest-Gate / pflichttest-gate (pull_request) Successful in 11m57s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Successful in 12m16s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Failing after 52s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Failing after 1m58s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Failing after 21m17s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Successful in 12m19s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Failing after 31s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Failing after 3s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Failing after 3s
DB-Integrationstests / db-tests (pull_request) Canceled after 0s
51b639625f
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
patrick merged commit ad00c6258d into main 2026-10-28 10:41:07 +01:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: scripte/nexarch#394