mockupstream

Overview ¶

Command mockupstream plays "the real enterprise service": it never trusts the proxy blindly, it verifies each capability token itself - a biscuit token's full signature chain plus its appended checks (internal/capability.Verify). Rather than a single public key hardcoded via env var, it fetches the proxy's key-rotation discovery endpoint (GET /biscuit-keys) at startup and refreshes it periodically, so a signing-key rotation on the proxy side reaches this verifier without a synchronized manual update or a restart - see internal/capability/keyring.go.