verify: close phase zero gate

This commit is contained in:
github-ops
2026-05-14 19:24:35 +00:00
parent c6b1456133
commit 56268d1482
3 changed files with 27 additions and 30 deletions
+25 -29
View File
@@ -18,15 +18,17 @@ pub async fn issue_agent_token(
.token_issuer()
.issue_short_lived(payload, &community_token_issuer_actor())
.await
.map_err(|error| map_token_issuer_error(
error,
edition,
MachineAccessMode::ShortLivedToken,
json!({
"grant_type": grant_type,
"upgrade_required": true,
}),
))?;
.map_err(|error| {
map_token_issuer_error(
error,
edition,
MachineAccessMode::ShortLivedToken,
json!({
"grant_type": grant_type,
"upgrade_required": true,
}),
)
})?;
Ok(Json(serde_json::json!(response)))
}
@@ -41,15 +43,17 @@ pub async fn issue_one_time_agent_token(
.token_issuer()
.issue_one_time(payload, &community_token_issuer_actor())
.await
.map_err(|error| map_token_issuer_error(
error,
edition,
MachineAccessMode::OneTimeToken,
json!({
"operation_id": operation_id,
"upgrade_required": true,
}),
))?;
.map_err(|error| {
map_token_issuer_error(
error,
edition,
MachineAccessMode::OneTimeToken,
json!({
"operation_id": operation_id,
"upgrade_required": true,
}),
)
})?;
Ok(Json(serde_json::json!(response)))
}
@@ -80,22 +84,14 @@ fn map_token_issuer_error(
"static agent key machine access is not available for token issue"
}
},
merge_machine_auth_context(
edition,
machine_access_mode,
extra_context,
),
merge_machine_auth_context(edition, machine_access_mode, extra_context),
),
TokenIssuerError::InvalidGrant(reason) => ApiError::validation_with_context(
"invalid machine token grant",
json!({ "reason": reason }),
),
TokenIssuerError::AgentKeyUnknown => {
ApiError::validation("agent key is unknown")
}
TokenIssuerError::OperationNotStrict => {
ApiError::validation("operation is not strict")
}
TokenIssuerError::AgentKeyUnknown => ApiError::validation("agent key is unknown"),
TokenIssuerError::OperationNotStrict => ApiError::validation("operation is not strict"),
TokenIssuerError::OperationNotPublishedForAgent => {
ApiError::validation("operation is not published for agent")
}