summaryrefslogtreecommitdiff
path: root/player-server/internal/service/auth_test.go
AgeCommit message (Collapse)Author
2026-05-19Return error from tokenManager.Generate instead of panickingPaul Buetow
A crypto/rand.Read failure is a process-level emergency, but the previous implementation aborted the entire server. Propagate the error through the TokenManager interface so callers (CreateAPIToken) can surface it via the normal HTTP 500 path instead of crashing. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-17Add Bearer token authentication alongside session cookiesPaul Buetow