hack: disable validation

api/src/auth.rs

@@ -101,8 +101,9 @@ async fn verify_capability(cacao: &Capability) -> Result<(), String> {
         serde_json::to_string(&cacao.payload).map_err(|e| e.to_string())?.as_bytes()
     );
     let sig = format!("{header}.{payload}.{}", URL_SAFE_NO_PAD.encode(cacao.signature.signature.as_bytes()));
-    println!("Did={:?}", jwk.key_id);
-    let (_header, _data) = decode_verify(&sig, &jwk).map_err(|e| e.to_string())?;
+    if let Err(e) = decode_verify(&sig, &jwk) {
+        println!("Validation failed: {}\n    Sig={sig}", e);
+    }
 
     Ok(())
 }
@@ -122,7 +123,6 @@ async fn read_authentication(data: &str) -> Result<Authentication, String> {
                 if cid == root {
                     verify_capability(&cacao).await?;
                 }
-
                 cacaos.insert(cid, cacao);
             }
             Err(e) => {