fix(chapter-14): give download tokens an expiration time

↗ view on GitHub · Amal · 2026-05-24 · 112a9a53

Chapter: 14 - Secret lifetime.

Plain-English map:
Add a 30-day expiration to signed download tokens while keeping old tokens
backward compatible.

Why it matters:
A signed link should not be useful forever. Shorter lifetimes reduce the
damage if a link is copied, leaked, or found later.

Principle:
Secrets and bearer tokens should expire.

Precedent borrowed:
Upstream PR #77.

Upstream base: willchen96/mike@d39f580.
Original local commit: e6bfeb1.
Repository amal66/mike
Author Amal <mamalanand3@gmail.com>
Authored
Parents 54dcdf77
Stats 2 files changed , +47 , -1
Part of Config validation and secret handling

Capture this commit into my fork

Download a Markdown prompt that tells Claude how to port this exact commit into your working tree. Run it via claude -p < capture-commit-112a9a53.md from inside the repo you want the change in.

⬇ Download capture-commit-112a9a53.md