Auth (DropCoreAuth)#
src/auth/drop_core_auth.ts. Routes at auth/** — whitelisted from the access
tree, so any valid token can introspect itself.
| method | endpoint | notes |
|---|---|---|
token.get({ mask? }) |
auth/token |
The current AccessObject (role, access tree, customer). |
token.check(path) |
auth/check |
Test whether this token may reach a given route path. |