Skip to content

chore(dq): consume tokenclaims from dauth instead of token-exchange-api#18

Merged
elffjs merged 1 commit into
mainfrom
dauth-tokenclaims
Jul 9, 2026
Merged

chore(dq): consume tokenclaims from dauth instead of token-exchange-api#18
elffjs merged 1 commit into
mainfrom
dauth-tokenclaims

Conversation

@elffjs

@elffjs elffjs commented Jul 9, 2026

Copy link
Copy Markdown
Member

What

Swaps dq's tokenclaims dependency from the retired token-exchange-api module to its successor, github.com/DIMO-Network/dauth/pkg/tokenclaims (v0.0.1).

  • Import path updated in six source files and four test files; the seven Privilege enum bindings in gqlgen.yml repointed; code regenerated. dauth's claim types and permission strings are identical, so token parsing behavior is unchanged.
  • go mod tidy drops token-exchange-api entirely.
  • cloudevent moves v0.2.13 → v1.1.0. dauth required v1.0.4 — a ghost tag deleted from GitHub but cached forever by the module proxy, whose content predates the v0.2.x line dq depends on (StoredEvent, VoidsID, DataIndexKey, raweventid). v1.1.0 was tagged from the current line to restore semver ordering, so no replace pin is needed.
  • MVS pulls a few shared deps up to dauth's floor: server-garage v0.4.0, shared v1.1.9, go-ethereum v1.17.3, zerolog v1.35.1.
  • The gqlgen regen flushed the permissionsFromCtx helper out of base.resolvers.go; it now lives in privilege_filter.go, where helpers survive regeneration.
  • Side effect of newer server-garage mcpgen: the MCP condensed schema no longer lists an unused scalar Address.

Why

token-exchange-api has been replaced by dauth. This makes dq consume claims from the successor before any grant-format work (ODRL SACD docs) starts in dauth, so the claim types version together with the service that mints them.

Testing

go build ./..., go test ./..., and golangci-lint run all pass.

🤖 Generated with Claude Code

https://claude.ai/code/session_01DNqJMcyn2p3oKosj3KFdQR

token-exchange-api has been replaced by dauth; dq now imports
github.com/DIMO-Network/dauth/pkg/tokenclaims (v0.0.1), which carries the
identical claim shape and permission constants, so token parsing behavior
is unchanged. gqlgen Privilege enum bindings updated and code regenerated.

cloudevent moves to v1.1.0. dauth required v1.0.4, a ghost tag deleted
from GitHub but immortal in the module proxy, whose content predates the
v0.2.x line dq depends on (StoredEvent, VoidsID, DataIndexKey,
raweventid); v1.1.0 was tagged from the current line to restore semver
ordering.

The gqlgen regen also flushed the permissionsFromCtx helper out of
base.resolvers.go into privilege_filter.go, where helpers survive regen.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DNqJMcyn2p3oKosj3KFdQR
@elffjs elffjs merged commit 9dbd2e3 into main Jul 9, 2026
6 checks passed
@elffjs elffjs deleted the dauth-tokenclaims branch July 9, 2026 20:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant