mirror of
https://github.com/claunia/marechai.git
synced 2026-07-08 17:57:08 +00:00
The sub claim was hardcoded to the literal string "TokenForTheApiWithAuth" for every token, making it useless for identifying the principal. It now holds user.Id, matching the JWT spec and enabling standard token inspection and future revocation workflows.