stroblme 44223ab168 Take the portal's JWKS from the tunnel and verify by kid ...

The welcome frame's keys replace the set pinned at enrolment, but only
over wss:// or loopback, the rule enrolment applies to the portal
address. Portal tokens are verified against the key their kid names, so
the hub can publish a new key beside the old one. A welcome without keys,
from an older hub, leaves the pinned set alone.

2026-10-15 10:31:40 +02:00

..

__init__.py

Rename Installation to Instance

2026-08-31 10:12:01 +02:00

config.py

Take the portal's JWKS from the tunnel and verify by kid

2026-10-15 10:31:40 +02:00

connector.py

Take the portal's JWKS from the tunnel and verify by kid

2026-10-15 10:31:40 +02:00

enroll.py

Take the portal's JWKS from the tunnel and verify by kid

2026-10-15 10:31:40 +02:00