jschoubben dad0a153ff route-proxy: a policy refusal is also not-my-token ...

autocert checks the host policy before the token and answers 403 — the
internal authority does this for every public name, so mail.novox.be's
challenge died on the internal manager's probe one commit after it
stopped dying on the public one's 404. Both shapes of refusal now fall
through to routing; a fifth test pins the 403 case with a refusing
policy.

2026-09-26 14:26:01 +02:00

..

authority_test.go

route-proxy: an ACME account belongs to the authority that issued it

2026-09-10 21:02:00 +02:00

challenge_test.go

route-proxy: a policy refusal is also not-my-token

2026-09-26 14:26:01 +02:00

Dockerfile

A route is a grant, and a provider is told where its consumer is

2026-08-31 02:43:19 +02:00

main.go

route-proxy: a policy refusal is also not-my-token

2026-09-26 14:26:01 +02:00

policy_test.go

route-proxy serves a route's internal-name alias, never certifies it

2026-09-25 17:24:13 +02:00

routes_test.go

route-proxy: a second authority for internal names, and a target a route names the scheme of

2026-09-25 20:37:03 +02:00