Implement authorization-fenced web workflows
This commit is contained in:
parent
459ffa04c6
commit
267665bb35
1 changed files with 3853 additions and 156 deletions
|
|
@ -101,6 +101,11 @@ unauthorized, absent, and never-committed results are not exposed. The hard
|
|||
delete endpoint returns the durable deletion resource established by the
|
||||
architecture.
|
||||
|
||||
Exact member access returns a non-cacheable time-limited URL after current
|
||||
authorization is revalidated. This JSON exchange lets a bearer-authenticated
|
||||
browser deliberately navigate to the target URL without relying on an
|
||||
unobservable cross-origin fetch redirect.
|
||||
|
||||
Before hard deletion, job reads return the complete `job` projection. Once only
|
||||
the permanent minimal record remains, authorized reads and deleted-job pages use
|
||||
the distinct `tombstone` projection rather than inventing discarded job fields.
|
||||
|
|
|
|||
Loading…
Reference in a new issue