hsiegeln 387e2e66b2 feat(04-02): wire Spring Security filter chain with JWT auth, bootstrap registration, and refresh endpoint ...

- JwtAuthenticationFilter extracts JWT from Authorization header or query param, validates via JwtService
- SecurityConfig creates stateless SecurityFilterChain with public/protected endpoint split
- AgentRegistrationController requires bootstrap token, returns accessToken + refreshToken + serverPublicKey
- New POST /agents/{id}/refresh endpoint issues new access JWT from valid refresh token

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-11 20:13:53 +01:00

..

src

feat(04-02): wire Spring Security filter chain with JWT auth, bootstrap registration, and refresh endpoint

2026-03-11 20:13:53 +01:00

pom.xml

test(04-01): add failing tests for security services

2026-03-11 19:58:59 +01:00