4 Commits

Include renames

Author	SHA1	Message	Date
HeinandClaude Sonnet 5	a70e3e02d0	feat(security): complete OAuth2/OIDC spec coverage in OAuthServer ... Add client_secret_basic/client_secret_post client authentication, the client_credentials grant (RFC 6749 §4.4, backed by a synthetic service-account user so it reuses the existing session/introspection/RLS pipeline unchanged), RFC 9728 protected resource metadata, and OIDC discovery + JWKS + id_token/userinfo support. Remove plan_oauth.md, which was only meant as a working handoff doc. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-29 09:45:09 +02:00
Hein	eee83f9dc6	feat(security): add query mode handling for database operations ... * Introduced QueryMode to select between stored procedure and direct SQL execution. * Implemented dbCapability to probe for stored procedure existence. * Added table names configuration for direct SQL operations. * Updated DatabaseTwoFactorProvider to support query mode and table names. * Implemented direct SQL methods mirroring stored procedures for TOTP operations. * Added tests for query mode logic and table names validation.	2026-07-07 15:29:29 +02:00
3 people	850ad2b2ab	fix(security): address all OAuth2 PR review issues ... Agent-Logs-Url: https://github.com/bitechdev/ResolveSpec/sessions/e886b781-c910-425f-aa6f-06d13c46dcc7 Co-authored-by: warkanum <208308+warkanum@users.noreply.github.com>	2026-04-09 14:04:53 +00:00
warkanum	6502b55797	feat(security): implement OAuth2 authorization server with database support ... - Add OAuthServer for handling OAuth2 flows including authorization, token exchange, and client registration. - Introduce DatabaseAuthenticator for persisting clients and authorization codes. - Implement SQL procedures for client registration, code saving, and token introspection. - Support for external OAuth2 providers and PKCE (Proof Key for Code Exchange).	2026-04-07 22:56:05 +02:00