fix: add support for --jwt-secret in cast --curl#15160
Merged
mablr merged 8 commits intoJun 22, 2026
Merged
Conversation
LeTamanoir
requested review from
0xrusowsky,
DaniPopes,
figtracer,
grandizzy,
mablr,
mattsse and
stevencartavia
as code owners
Contributor
Author
|
I am a total Rust noob, so if I did something abominable, I am sorry in advance. |
LeTamanoir
force-pushed
the
fix/jwt-auth-in-cast-curl-output
branch
from
291c077 to
3b51aef
Compare
LeTamanoir
force-pushed
the
fix/jwt-auth-in-cast-curl-output
branch
from
3b51aef to
d8b34af
Compare
Contributor
Author
|
Hey @stevencartavia, thanks a lot for the review, I believe I applied all the fixes you mentioned 👍 |
stevencartavia
left a comment
stevencartavia
left a comment
Member
There was a problem hiding this comment.
please run cargo +nightly fmt
stevencartavia
approved these changes
Jun 16, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Motivation
Add support for
--jwt-secretin cast--curloutput so users can generate authenticated RPC curl commands.Solution
Introduce JWT generation from a hex secret using
JwtSecret+Claims::default()and inject the resulting token as anAuthorization: Bearer ...header in the curl transport. Wire it through bothcallandrpcCLI paths and update the transport to accept a JWT secret instead of a raw token. Add tests validating curl output includes the correct Authorization header.