oficina / docs Public

Say list.admits where the code says list.admits

The comment on rauth Authorize still named list.allows, which is no
longer the function passed and no longer has the same signature. In a
repo where the comments are the record, a comment naming the wrong
function is the kind of wrong that outlives the person who can spot it.

Comment only; no code change.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RVcEQ8NgrPCpRTb6JtBz1Q

Paul Campbell pushed by paul@keymail.dev 1 month ago 02de0b21f25b028c1ab73c1c3548bf4d786332a6 parent c698871

1 file changed, +3 −1

internal/docs/auth.go +3 −1

CI passed — run details

Intent

full ledger: sharing

diff --git a/internal/docs/auth.go b/internal/docs/auth.go

index 01118e5..38dd9d2 100644

--- a/internal/docs/auth.go

+++ b/internal/docs/auth.go

@@ -458,7 +458,9 @@ func requireAdmissionOf(list allowlist, signinPath string, identity func(*http.R

// a Flow per request, since the rate limiter's budget lives on the

// value), Origin as both the emailed link's base and the cookie

// decision, InstanceKey and Mailer already resolved and fail-closed

-// by resolveInstanceKey/buildMailer above. Authorize is list.allows —

+// by resolveInstanceKey/buildMailer above. Authorize is list.admits —

+// the fail-closed predicate form, because rauth's hook has no way to

+// say "could not tell" and refusing is the safe answer here —

// belt-and-suspenders alongside gateBegin's own gate on POST /signin:

// this defends admission itself (a link somehow minted for a

// non-permitted address — a future code path, or a link mailed before