Parse the APPROVAL_ACTOR_TOKENS secret: {"<token>": {"id","role"}}. Every entry passes the real validator (toApprovalActor) — unknown roles and empty ids are dropped rather than trusted; there is no as cast at this JSON boundary.
APPROVAL_ACTOR_TOKENS
{"<token>": {"id","role"}}
toApprovalActor
as
Parse the
APPROVAL_ACTOR_TOKENSsecret:{"<token>": {"id","role"}}. Every entry passes the real validator (toApprovalActor) — unknown roles and empty ids are dropped rather than trusted; there is noascast at this JSON boundary.