Parse the APPROVAL_ACTOR_TOKENS secret:
{"<token>": {"id","role","tenantId"}}. Every entry passes the real
validator (toApprovalActor) — unknown roles, empty ids, and missing,
invalid, or reserved-identity ('system') tenantIds are dropped rather
than trusted; there is no as-cast at this JSON boundary.
Parse the
APPROVAL_ACTOR_TOKENSsecret:{"<token>": {"id","role","tenantId"}}. Every entry passes the real validator (toApprovalActor) — unknown roles, empty ids, and missing, invalid, or reserved-identity ('system') tenantIds are dropped rather than trusted; there is noas-cast at this JSON boundary.