2 Commits

Author	SHA1	Message	Date
Joseph Doherty	45a8c79ffe	refactor(security): JwtBearer validation via IPostConfigureOptions (F2) ... Eliminates the services.BuildServiceProvider() captive-provider antipattern (ASP0000) inside AddJwtBearer. The new ConfigureJwtBearerFromTokenService resolves JwtTokenService from the real DI container at runtime and stays in lock-step with JwtTokenService.BuildValidationParameters. All 27 Security.Tests stay green, including the F1 integration tests that exercise /auth/token through the real bearer pipeline.	2026-05-26 06:18:00 -04:00
Joseph Doherty	207fc6aba9	feat(security): cookie+JWT hybrid auth via AddOtOpcUaAuth	2026-05-26 04:35:48 -04:00