gen

Overview ¶

Command gen regenerates the embedded auth-disabled API token (keyset/token.jwt), signed with the committed private keyset. Run from the repo root:

go run ./pkg/authmode/keyset/gen > pkg/authmode/keyset/token.jwt

The claims are fixed (see pkg/authmode/token.go) so the one token validates on every authdisabled instance. Only rerun this if the keyset or those claims change.