legacy auth: decouple from ziti_ctrl by ekoby · Pull Request #1003 · openziti/ziti-sdk-c

ekoby · 2026-03-02T19:30:13Z

make legacy auth flow same as internal OIDC instead of relying on ziti_ctrl internal side effects

fix integration tests

library/ziti_enroll.c

dovholuknf · 2026-03-03T14:33:24Z

library/ziti_ctrl.c

-            tlsuv_http_header(ctrl->client, "zt-session", NULL);
-            tlsuv_http_header(ctrl->client, "zt-session", s->token);
-        }
+        tlsuv_http_header(ctrl->client, "Authorization", NULL);


for another time probably but both of these should be constants imo. they show up a lot in the code

library/ziti.c

tests/test_jwt.cpp

library/external_auth.c

ekoby added 5 commits March 2, 2026 14:21

introduce credential objects

a44e4ed

normalize passing API session and external JWTs to ziti_ctrl

fd0eb0c

keep track of external JWTs

767ed4f

remove the use of ziti_ctrl in legacy_auth

0a476a1

cleanup ziti_ctrl: remove auth methods

60eedfd

fix integration tests

ekoby requested a review from a team as a code owner March 2, 2026 19:30

ekoby and others added 6 commits March 2, 2026 14:45

debug jwt test

76f8e22

parse_enrollment_jwt should not change input

8edb466

enrollment: properly find jwt signing input

81092f0

no need to cache session expiration in ziti context

3984f79

use consistent http header case

f956e12

use tlsuv@v0.40.13

10a2f43