Jens/ModelForge-Public
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Publish curated ITWorx-ModelForge source from 990401737f96c8d46a9f7b0d84994516cadcb6a0

Browse Source
This commit is contained in:
Public Source Publisher committed 2026-09-30 09:23:17 +00:00
1 parent 7082ab955a
commit 848f0d8f8a
434 files changed
+67298 -4315
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/security/SERVICE_AUTHENTICATION.md
+4 -1
View File
@@ -5,8 +5,11 @@ returns an `mfsvc_…` bearer secret once. Only SHA-256, a non-secret prefix, ti
status, rate/concurrency policy and explicit capability scopes are stored. Secrets are absent from
audit events and ordinary logs.
Human credentials use the separate `mfop_` namespace and deployment-owned identity registry described
in [Operator access](../operations/OPERATOR_ACCESS.md). They never authenticate capability or node
requests; machine credentials never become human principals or Console sessions.
Gateway authentication rejects missing, malformed, unknown, revoked or expired credentials,
disabled clients and missing capability scope. Each client has a sliding one-minute request limit
and a concurrent-request limit. Credential creation and revocation are audited. The frontend keeps
the one-time value in memory only and never reloads plaintext.