From 860e296bb060a3cf0a67904af00de6f358270e02 Mon Sep 17 00:00:00 2001 From: Anthony LC Date: Tue, 4 Aug 2026 18:24:00 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=9B=82(y-provider)=20verify=20jwt=20token?= =?UTF-8?q?=20instead=20of=20the=20shared=20api=20key?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The /api/convert route no longer accepts the Y_PROVIDER_API_KEY shared secret. It now verifies the admin JWT signed by Django against the JWKS published on its /api/v1.0/jwks endpoint. --- src/frontend/servers/y-provider/__tests__/convert.test.ts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/frontend/servers/y-provider/__tests__/convert.test.ts b/src/frontend/servers/y-provider/__tests__/convert.test.ts index bbbec7bf6..88ed4174d 100644 --- a/src/frontend/servers/y-provider/__tests__/convert.test.ts +++ b/src/frontend/servers/y-provider/__tests__/convert.test.ts @@ -17,6 +17,8 @@ vi.mock('../src/env', async (importOriginal) => { }; }); +import { mockJwksEndpoint, signAdminToken } from './testUtils/adminJwt'; + import { docsBlockNoteSchema } from '@/blockSpecs'; import { initApp } from '@/servers';