Redence capability: Role-based access control (Authentication)
Repo: Nerva. Stack: JWT, OAuth2, Hono middleware.
Substantive change: add real RBAC — a requireRole(role) Hono middleware that reads roles from the verified JWT claims and returns 403 when the caller lacks the role, applied to at least one admin-only route. Add integration tests covering allowed vs forbidden roles. The diff must add real authorization logic.
Done when: RBAC middleware + protected route + tests merged to main, checks green. Include the current Redence proof token (Role-based access control verify page) in the commit message.
Redence capability: Role-based access control (Authentication)
Repo: Nerva. Stack: JWT, OAuth2, Hono middleware.
Substantive change: add real RBAC — a
requireRole(role)Hono middleware that reads roles from the verified JWT claims and returns 403 when the caller lacks the role, applied to at least one admin-only route. Add integration tests covering allowed vs forbidden roles. The diff must add real authorization logic.Done when: RBAC middleware + protected route + tests merged to main, checks green. Include the current Redence proof token (Role-based access control verify page) in the commit message.