Hein a70e3e02d0 feat(security): complete OAuth2/OIDC spec coverage in OAuthServer ...

Add client_secret_basic/client_secret_post client authentication, the
client_credentials grant (RFC 6749 §4.4, backed by a synthetic
service-account user so it reuses the existing session/introspection/RLS
pipeline unchanged), RFC 9728 protected resource metadata, and OIDC
discovery + JWKS + id_token/userinfo support.

Remove plan_oauth.md, which was only meant as a working handoff doc.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-29 09:45:09 +02:00

..

cache

Cache package is pure infrastructure. Cache invalidates on create/delete from the API

2025-12-18 16:30:38 +02:00

common

fix(cors): update CORS headers handling for requests

2026-07-01 12:27:39 +02:00

config

feat(config): add HTTP2 field to ServerInstanceConfig and align with server.Config

2026-06-30 13:36:06 +02:00

dbmanager

feat(db): add query metrics tracking for database operations

2026-04-10 13:51:46 +02:00

errortracking

fix(errortracking): update error context handling in Sentry

2026-05-21 14:03:01 +02:00

eventbroker

fix: liniting issues and events dev

2025-12-30 14:40:45 +02:00

funcspec

feat(hooks): add BeforeOp hook and fix BeforeScan row-security gap

2026-07-25 11:39:31 +02:00

logger

fix: liniting issues and events dev

2025-12-30 14:40:45 +02:00

metrics

refactor(db): remove metrics enabling methods from adapters

2026-04-10 14:13:15 +02:00

middleware

Work on server

2025-12-20 10:42:51 +02:00

modelregistry

fix(reflection): replace reflect.Ptr with reflect.Pointer

2026-06-22 16:40:07 +02:00

mqttspec

feat(hooks): add BeforeOp hook and fix BeforeScan row-security gap

2026-07-25 11:39:31 +02:00

openapi

fix(reflection): replace reflect.Ptr with reflect.Pointer

2026-06-22 16:40:07 +02:00

reflection

fix(reflection): replace reflect.Ptr with reflect.Pointer

2026-06-22 16:40:07 +02:00

resolvemcp

feat(security): add GetUserRef method for opaque user identifiers

2026-07-10 13:47:32 +02:00

resolvespec

feat(hooks): add BeforeOp hook and fix BeforeScan row-security gap

2026-07-25 11:39:31 +02:00

restheadspec

feat(hooks): add BeforeOp hook and fix BeforeScan row-security gap

2026-07-25 11:39:31 +02:00

security

feat(security): complete OAuth2/OIDC spec coverage in OAuthServer

2026-07-29 09:45:09 +02:00

server

fix(manager): ensure HTTP1 is set when HTTP2 is disabled

2026-06-30 13:54:56 +02:00

spectypes

fix(spectypes): correct quoting logic in formatPostgresStringArray

2026-04-30 15:38:21 +02:00

testmodels

Migration to Bitech

2025-11-10 11:43:15 +02:00

tracing

Fixed Attempt to Fix Docker / Podman

2025-12-19 16:42:01 +02:00

websocketspec

feat(hooks): add BeforeOp hook and fix BeforeScan row-security gap

2026-07-25 11:39:31 +02:00