Repository navigation

Enforce authenticated identity on every public Convex entry point - #288

Merged

brianorwhatever merged 7 commits into

mainfrom

fix/236-authenticated-identity

Oct 8, 2026

Merged

Enforce authenticated identity on every public Convex entry point#288
brianorwhatever merged 7 commits into
mainfrom
fix/236-authenticated-identity

Commits on Oct 8, 2026
- Enforce authenticated identity on every public Convex entry point (#236)
  
  authored and
  Brian
  committed
  8ec21e7
- Address review: persist acting credential on activity rows, cover HTTP routes and private reads
  
  authored and
  Brian
  committed
  a5830c6
- Boundary test: send one target on GET routes so validation never precedes the auth check
  
  authored and
  Brian
  committed
  7ab6552
- Attribute comment writes and deletions to the acting credential; check HTTP reads
  
  authored and
  Brian
  committed
  da78255
- Keep audit credentials out of read responses; deletion rows keep only the comment ID
  
  authored and
  Brian
  committed
  99b3e2a
- docs: only the activity read has an HTTP route
  
  authored and
  Brian
  committed
  b35d90b
- Adversarial review: close JWT re-encoding revocation bypass and client DID drift
  
  authored and
  Brian
  committed
  d78e17d