2 commits

Author	SHA1	Message	Date
reverse	c532828aab	jwt: match claim_num only against a top-level object key (depth-aware scan), not any substring — a claim whose string value contained "exp": could otherwise spoof the exp an external verifier reads; added nested + string-value regression tests	2026-08-19 01:31:22 +00:00
reverse	a2401a4f54	modules: port jwt (native HS256) + recaptcha (JWT registration gate + CAPTCHA cmd)	2026-08-09 11:54:00 +00:00