- Best-effort JWT parsing on every request (non-blocking for unauthenticated routes) - Attaches parsed payload to req.jwtPayload for downstream use by getRequestProductId() - Invalid/expired tokens silently ignored — auth-required routes handle their own validation |
||
|---|---|---|
| .. | ||
| extraction-service | ||
| monitoring | ||
| platform-service | ||