Skip to content

Conversation

@Piskoo
Copy link
Collaborator

@Piskoo Piskoo commented Jan 13, 2026

Summary

This PR adds support for instance admin tokens to existing api token logic

Changes

  • Organization in api tokens is now optional
  • Adds an explicit JWT scope claim for instance admin API tokens to enable clearer identification
  • Add permissions(policies) planned for instance admin token
  • Adds correct handling for instance admin tokens to api token middleware

Signed-off-by: Sylwester Piskozub <[email protected]>
Signed-off-by: Sylwester Piskozub <[email protected]>
Signed-off-by: Sylwester Piskozub <[email protected]>
Signed-off-by: Sylwester Piskozub <[email protected]>
Signed-off-by: Sylwester Piskozub <[email protected]>
Signed-off-by: Sylwester Piskozub <[email protected]>
@Piskoo Piskoo changed the title feat(api-token): add instance token support feat(api-token): add instance admin token support Jan 13, 2026
@Piskoo Piskoo changed the title feat(api-token): add instance admin token support feat(api-token): add instance admin token Jan 13, 2026
@Piskoo Piskoo marked this pull request as ready for review January 13, 2026 14:05
@Piskoo Piskoo requested review from jiparis and migmartri January 13, 2026 14:05
Signed-off-by: Sylwester Piskozub <[email protected]>
Signed-off-by: Sylwester Piskozub <[email protected]>
Signed-off-by: Sylwester Piskozub <[email protected]>
Copy link
Member

@jiparis jiparis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great, thanks!!!

@Piskoo Piskoo merged commit 49466dd into chainloop-dev:main Jan 14, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants