Skip to content

fix: expose raw JWTs across LocalNet surfaces - #289

Merged
zheli merged 32 commits into
mainfrom
more-names-hosts
Jul 28, 2026
Merged

fix: expose raw JWTs across LocalNet surfaces#289
zheli merged 32 commits into
mainfrom
more-names-hosts

Conversation

@zheli

@zheli zheli commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Return raw LocalNet JWT values by default across CLI, Web UI, REST, and mock surfaces.
  • Remove the obsolete JWT redaction opt-in controls.
  • Preserve redaction in errors, audit logs, and access logs.

Changes

  • localnet env, localnet status, and localnet creds now expose captured JWTs directly.
  • JWT issuance, app-config, and instance-detail APIs return raw credentials without include_jwt query parameters.
  • Updated frontend API calls, Developer Setup tests, mock routes, and fixtures.
  • Updated shared builder/status tests and proposal-deviation documentation.

Notes

  • LocalNet remains loopback-only and JWTs are development credentials.
  • Error-message JWT scrubbing and credential-free audit/access logs remain unchanged.
  • Verification: make test, make lint, go test ./..., frontend npm test -- --run, and frontend npm run build.

zheli added 30 commits July 28, 2026 14:06
@zheli
fix(env): export raw LocalNet JWTs by default
645c24f
@zheli
fix(status): expose raw LocalNet JWTs
be82692
@zheli
fix(cli): remove env JWT redaction opt-in
5367b62
@zheli
fix(cli): remove status JWT redaction flag
a1eb552
@zheli
fix(creds): show JWTs in default table output
a5639f0
@zheli
docs(cli): describe raw JWTs in creds table
81d895c
@zheli
fix(ui): return raw JWTs from LocalNet auth APIs
71955ec
@zheli
fix(ui): expose raw JWTs in instance details
eba04af
@zheli
fix(ui): make JWT API responses raw by default
49ddd68
@zheli
fix(ui): remove JWT reveal query opt-in
955c5a1
@zheli
test(ui): keep mock LocalNet JWTs usable
1178949
@zheli
test(env): pin raw JWT export default
c8ea4fe
@zheli
test(cli): require raw JWTs without env opt-in
1df1db1
@zheli
test(status): require raw JWTs by default
629db03
@zheli
test(creds): require JWTs in default table
811bdc7
@zheli
test(ui): require raw JWT responses by default
2db4b6b
@zheli
test(ui): remove JWT query opt-in expectations
4e7e220
@zheli
test(ui): pin raw JWT developer setup
a59dd5c
@zheli
docs(ui): remove obsolete JWT query reference
f0f0249
@zheli
docs(test): clarify raw JWT API contract
20bae92
@zheli
test(ui): use raw mock JWT in dashboard
0b69166
@zheli
test(mock): provide raw fixture JWTs
8d1bae0
@zheli
test(mock): update LocalNet fixture JWTs
e06e033
@zheli
docs(ui): remove obsolete JWT query logging reference
f7678d7
@zheli
test(ui): update query privacy comment
6985eae
@zheli
docs(ui): update credential projection comment
f2145ff
@zheli
docs: record raw LocalNet JWT defaults
e6aa40d
@zheli
test(ui): seed raw JWT for app config coverage
54df797
@zheli
style: format JWT output changes
a86f110
@zheli
docs(test): remove stale redaction wording
3be1529
@cursor

cursor Bot commented Jul 28, 2026

Copy link
Copy Markdown

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

@zheli
feat(creds): restore format hint on creds table
7ca746c 
The raw-JWT table now wraps in a standard terminal because it appends the
full token as a trailing column. Restore a footer pointing users to the
env/raw formats, which emit clean single-line copy-pasteable output.
@zheli
zheli merged commit 3584e2f into main Jul 28, 2026
25 checks passed
@zheli
zheli deleted the more-names-hosts branch July 28, 2026 13:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@zheli