auth: accept EdDSA tokens + soft audience check (Better Auth compatibility)

Browse Source

Better Auth signs access tokens with EdDSA (Ed25519), not RS256. Accept EdDSA
(+ RS256/ES256), and validate issuer + signature + expiry strictly while checking
audience softly — single-resource server behind a dedicated AS with dynamic DCR
client ids, so issuer + signature is the trust boundary. Adds an EdDSA test.

...

This commit is contained in:

Chris Farhood

2026-07-05 21:55:52 -04:00

parent 8f3abbde8f

commit e50be99374

3 changed files with 54 additions and 15 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

json

+1 -1

File diff suppressed because one or more lines are too long