mirror of
https://github.com/mauriceboe/TREK.git
synced 2026-10-19 13:36:48 +00:00
Maurice
4dce8b9a7f
The docblock said the ws handshake consumes tokens from outside the container. That was true when it was written and stopped being true one PR later, when the transport became a gateway that injects this service. The store still has to be module state, for a reason the comment did not give: four bridges build EphemeralTokenService by hand, and per-instance state would give each of them an empty Map, so a download token minted through a bridge would never validate. An audit lens flagged the stale reasoning; the requirement survives it.