Deluan c479c4f581 refactor(api): tighten API v1 auth internals and first-admin setup ...

Load the signer lock-free once cached, read the signing key before
generating one, cap the liveness cache at its limit, share one
grantable-scope predicate, and let CreateFirstAdmin open its own locked
transaction with an optional in-transaction follow-up.

2026-09-28 20:06:28 -04:00

..

auth_test.go

fix(server): create the first admin inside one locked transaction

2026-09-28 20:06:27 -04:00

auth.go

refactor(api): reuse existing helpers in API v1 auth

2026-09-28 20:06:28 -04:00

claims_test.go

feat(jellyfin): non-expiring, audience-scoped tokens revocable by password change (#6013)

2026-08-22 20:36:24 -04:00

claims.go

feat(jellyfin): non-expiring, audience-scoped tokens revocable by password change (#6013)

2026-08-22 20:36:24 -04:00

first_admin_test.go

refactor(api): tighten API v1 auth internals and first-admin setup

2026-09-28 20:06:28 -04:00

first_admin.go

refactor(api): tighten API v1 auth internals and first-admin setup

2026-09-28 20:06:28 -04:00