security: access control for particles #169

Merged
talksik merged 5 commits from security-fundamentals-firestore into master 2026-04-16 22:14:34 +00:00
Showing only changes of commit c64d04e0c5 - Show all commits
+1 -4
View File
@@ -57,10 +57,7 @@ type AuthService interface {
ExtendSession(ctx context.Context, sessionToken string) error
SignOut(ctx context.Context, sessionToken string) error
// MintFirebaseCustomToken returns a Firebase custom token with uid=humanId
// and no custom claims. Network membership is enforced via a Firestore
// mirror (humans/{humanId}.networks) read at rule eval time, so the token
// only needs to carry identity.
// MintFirebaseCustomToken returns a Firebase custom token with uid=humanId and no custom claims.
MintFirebaseCustomToken(ctx context.Context, humanId string) (string, error)
IsSystemAdmin(ctx context.Context, email string) bool