9 commits

Author	SHA1	Message	Date
Jeremiah Lowin	3bc2805b67	fix: normalize Google scope shorthands and surface valid_scopes ... Google accepts shorthand scopes like "email" in authorization requests but returns full URIs like "https://www.googleapis.com/auth/userinfo.email" in token responses. The verifier now normalizes shorthands at initialization so the subset check works regardless of which form was used. GoogleProvider also now exposes valid_scopes for controlling which scopes clients can request beyond the required minimum. Co-authored-by: Claude <noreply@anthropic.com>	2026-03-13 18:29:52 -04:00
Bill Easton	cdad99583e	Fix Windows test timeouts in OAuth proxy provider tests (#3123) ... Co-authored-by: Bill Easton <strawgate@users.noreply.github.com> Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com> Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2026-02-09 20:54:16 -05:00
Jeremiah Lowin	568300e8b5	Remove automatic environment variable loading from auth providers (#2752)	2025-12-26 15:37:59 -05:00
Jeremiah Lowin	4177d8358d	Fix ty 0.0.5 type errors (#2676)	2025-12-22 19:47:20 -05:00
Jeremiah Lowin	ea31747572	Add refresh token support defaults to GoogleProvider ... Set access_type=offline and prompt=consent by default to ensure refresh tokens are returned by Google. Also expose extra_authorize_params so users can customize authorization behavior.	2025-11-17 11:54:00 -05:00
William Easton	063ffe9f64	Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) ... * Checkpoint progress * Checkpoint progress * add derive b64 method * PR clean-up * refactor da proxy * Updates to tests * Make jwt_signing_key required for oauth proxy * use typing_extensions and fix tests * PR Cleanup * also adjust integration tests * Update docs, use client secret to derive jwt signing key * You win some you lose some, gg claude * check for both in derive * update documentation / clean up * Update http.mdx --------- Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2025-10-24 19:08:58 -04:00
Jeremiah Lowin	d36ea42b92	Fix OAuth resource URL handling and WWW-Authenticate header (#1706)	2025-09-02 15:14:05 -04:00
Jeremiah Lowin	aef6d23fb9	refactor: move scope parser to utilities (#1642)	2025-08-26 10:50:54 -04:00
Jeremiah Lowin	c3d1176a69	Add WorkOS and Azure OAuth providers (#1550)	2025-08-20 16:22:03 -04:00