wdevs/ResolveSpec
5
0
Fork 0
mirror of https://github.com/bitechdev/ResolveSpec.git synced 2026-07-31 06:37:39 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
450 Commits 3 Branches 270 Tags
7c737afc5a885841124b79e4e84049cab164c0f8
Commit Graph

4 Commits

Author SHA1 Message Date
Hein a70e3e02d0 feat(security): complete OAuth2/OIDC spec coverage in OAuthServer 
Add client_secret_basic/client_secret_post client authentication, the
client_credentials grant (RFC 6749 §4.4, backed by a synthetic
service-account user so it reuses the existing session/introspection/RLS
pipeline unchanged), RFC 9728 protected resource metadata, and OIDC
discovery + JWKS + id_token/userinfo support.

Remove plan_oauth.md, which was only meant as a working handoff doc.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-29 09:45:09 +02:00
copilot-swe-agent[bot] ca0545e144 fix(security): address validation review comments - mutex safety and issuer normalization 
Agent-Logs-Url: https://github.com/bitechdev/ResolveSpec/sessions/e886b781-c910-425f-aa6f-06d13c46dcc7

Co-authored-by: warkanum <208308+warkanum@users.noreply.github.com>
 2026-04-09 14:07:45 +00:00
copilot-swe-agent[bot] 850ad2b2ab fix(security): address all OAuth2 PR review issues 
Agent-Logs-Url: https://github.com/bitechdev/ResolveSpec/sessions/e886b781-c910-425f-aa6f-06d13c46dcc7

Co-authored-by: warkanum <208308+warkanum@users.noreply.github.com>
 2026-04-09 14:04:53 +00:00
warkanum 6502b55797 feat(security): implement OAuth2 authorization server with database support 
- Add OAuthServer for handling OAuth2 flows including authorization, token exchange, and client registration.
- Introduce DatabaseAuthenticator for persisting clients and authorization codes.
- Implement SQL procedures for client registration, code saving, and token introspection.
- Support for external OAuth2 providers and PKCE (Proof Key for Code Exchange).
 2026-04-07 22:56:05 +02:00