Support RFC 8693 token exchange for enterprise IdP flows (SEP-990) - #2988

Merged

Kludex merged 14 commits into

mainfrom

worktree-synthetic-stirring-treehouse

Jun 26, 2026

Commits on Jun 26, 2026

Support RFC 8693 token exchange for enterprise IdP flows (SEP-990)
Kludex
committed
Preserve empty issuer/resource paths on AuthSettings
Kludex
committed
Merge branch 'auth-settings-preserve-empty-path' into worktree-synthetic-stirring-treehouse
Kludex
committed
Merge remote-tracking branch 'origin/main' into worktree-synthetic-stirring-treehouse
Kludex
committed
Add end-to-end interaction tests for token exchange (SEP-990)
Kludex
committed
Strengthen token-exchange interaction tests per review
Kludex
committed
Use the RFC 7523 jwt-bearer grant for the SEP-990 ID-JAG leg
Kludex
committed
Harden the identity-assertion grant per review
Kludex
committed
Pin identity-assertion discovery to the expected authorization server
Kludex
committed
Don't broaden initial identity-assertion scope; normalize origin ports
Kludex
committed
Always send the configured scope on identity-assertion exchanges
Kludex
committed
Merge remote-tracking branch 'origin/main' into worktree-synthetic-stirring-treehouse
Kludex
committed
Make IdentityAssertionOAuthProvider a standalone httpx.Auth
maxisbey
committed
Merge remote-tracking branch 'origin/worktree-synthetic-stirring-treehouse' into worktree-synthetic-stirring-treehouse
maxisbey
committed