stacklok / toolhive / 28648256245

push

github

Support nested map claims in Cedar authorization for act claim (#5713)

Add map[string]interface{} case to convertToCedarValue so that nested
JWT claims like the RFC 8693 act claim ({"sub": "spiffe://..."}) are
converted to Cedar Records instead of being silently dropped.

This enables delegation policies such as:
  principal.claim_act.sub like "spiffe://toolhive.dev/ns/agents/sa/*"

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

15 of 15 new or added lines in 1 file covered. (100.0%)

72447 of 106985 relevant lines covered (67.72%)

64.05 hits per line