Skip to content

Stop docs from overclaiming auth, license, and pull - #2532

Merged
timsehn merged 1 commit into
masterfrom
docs/auth-license-pull
Sep 1, 2026
Merged

Stop docs from overclaiming auth, license, and pull#2532
timsehn merged 1 commit into
masterfrom
docs/auth-license-pull

Conversation

@timsehn

@timsehn timsehn commented Sep 1, 2026

Copy link
Copy Markdown
Collaborator

Docs-only. Three Beta-review lies, no code changes.

  1. Auth. DoltLite mints iat and exp. doltlite-remotesrv checks exp only — not iat or nbf — and requires the six-character Bearer prefix. JWT is attached on HTTPS only. doc/doltlite/auth.md now says that.

  2. License. LICENSE.md claimed that rm -rf configure autosetup autoconf left a 100% public-domain tree, and that non-PD code never reached build products. DoltLite is Apache-2.0. Vendored Mbed TLS (Apache-2.0 OR GPL-2.0-or-later) and Ed25519 (zlib-style) are linked into remotes/creds builds. BLAKE3 was already listed.

  3. Pull. README said dolt_pull was fetch + fast-forward. It fetches, fast-forwards when it can, three-way merges the current branch when it has diverged, and refuses a non-FF on a non-current branch.

Co-Authored-By: Grok 4.6 noreply@x.ai

doltlite-remotesrv verifies exp, not iat/nbf, and requires a capital
Bearer prefix. LICENSE.md is not 100% public domain after deleting
autosetup: mbedtls and ed25519 ship in the library. dolt_pull merges
when the current branch has diverged; it is not fetch-plus-FF only.

Co-Authored-By: Grok 4.6 <noreply@x.ai>
@timsehn
timsehn merged commit c5ce1c8 into master Sep 1, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant