[Auth] Decide: opaque constraints vs IConstraintPolicy; shared JWT/refresh helper #20

Open
opened 2026-11-06 15:36:01 -05:00 by dohertj2 · 0 comments
Owner

Two open design decisions in the Auth component: (1) whether authorization constraints stay an opaque object? or get a small IConstraintPolicy (shared-contract Q3); (2) whether to ship a shared JWT/refresh helper (GAP #7). Neither has a second consumer asking yet — decide (or explicitly park) when one appears. (A3, the shared dev base DN, is done: dc=zb,dc=local.)

Source: components/auth/GAPS.md, Decisions still open.

Two open design decisions in the Auth component: (1) whether authorization constraints stay an opaque object? or get a small IConstraintPolicy (shared-contract Q3); (2) whether to ship a shared JWT/refresh helper (GAP #7). Neither has a second consumer asking yet — decide (or explicitly park) when one appears. (A3, the shared dev base DN, is done: dc=zb,dc=local.) Source: components/auth/GAPS.md, Decisions still open.
dohertj2 added the type:featurepriority:p3migrated labels 2026-11-06 15:36:01 -05:00
Sign in to join this conversation.