pepegar
03/17/2025, 10:06 AMat least as fresh as
semantics on permissions.
But that's a bit of a PITA and I'd like to avoid that roundtrip to PGSQL, so I was thinking about passing them to the client in HTTP cookie responses, that way the client would always send over the latest zed token they know of.. Does that make sense to you? I cannot see any problem right now but am no expert in that.