9 commits

Author	SHA1	Message	Date
Jeremiah Lowin	67527c1f69	Block unsafe OAuth redirect schemes (#4419)	2026-07-05 17:16:10 -04:00
Jacky Su	0668eb7b80	Fix/cimd flow issue (#4206)	2026-06-27 10:57:58 -04:00
Bobby Davidson	7f2d034f4d	Forward IdP auth errors to MCP client instead of showing HTML error page (#4293) ... Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2026-06-24 12:09:09 -04:00
Taylor Wilsdon	61e56c683e	enh: Add public API for updating OAuthProxy scopes after initialization (#4091)	2026-05-04 15:49:12 -04:00
Jeremiah Lowin	1d39e26025	Fix CIMD clients getting required_scopes instead of valid_scopes (#3836)	2026-04-12 16:34:56 -04:00
Jeremiah Lowin	ea529f6a49	feat: make upstream_client_secret optional in OAuthProxy (#3486) ... * feat: make upstream_client_secret optional in OAuthProxy Extract _create_upstream_oauth_client() factory method for subclass override. Cookie signing falls back to JWT key material when no secret. * fix: include client_id in revocation requests for public clients * fix: use factory method for revocation auth	2026-03-15 11:14:56 -04:00
Jeremiah Lowin	880d835ccc	Add CIMD (Client ID Metadata Document) support for OAuth (#2871)	2026-02-06 13:44:52 -05:00
claude[bot]	cec40b378d	Use MemoryStore for OAuth proxy tests ... Updated all OAuthProxy test instantiations to use MemoryStore instead of defaulting to DiskStore, avoiding SQLite timeout issues on Windows and improving test performance. Co-authored-by: Bill Easton <strawgate@users.noreply.github.com>	2026-02-01 02:30:05 +00:00
Jeremiah Lowin	23bfdf0680	Consolidate test fixtures and refactor large test files (#2941)	2026-01-19 15:18:35 -05:00