Function looksLikeJWT

internal/agent/agent_identity.go:191–193

looksLikeJWT is a cheap pre-filter: a compact JWS is three base64url segments separated by dots and (for our RS256 tokens) starts with the "eyJ" header. Avoids running full verification on API keys / opaque OAuth tokens.

(s string)

// separated by dots and (for our RS256 tokens) starts with the "eyJ" header.
// Avoids running full verification on API keys / opaque OAuth tokens.
func looksLikeJWT(s string) bool {
	return strings.HasPrefix(s, "eyJ") && strings.Count(s, ".") == 2
}