Bas van den Aakster 34babd036e Fix: Auto-claim should not validate claim message format ...

Auto-claim was incorrectly using validateUsernameClaim() which
expects 'claim:{username}:{timestamp}' message format. This failed
when users tried to auto-claim via publishService or getService.

Now auto-claim only:
- Validates username format
- Verifies signature against the actual message
- Claims the username

This allows implicit username claiming on first authenticated request.

2025-12-12 21:03:44 +01:00

19 KiB

Raw Blame History

View Raw