5 commits

Author	SHA1	Message	Date
Jeremiah Lowin	82f310fe61	AuthKit: auto-bind token audience to resource URL (RFC 8707) (#3905)	2026-04-13 17:11:17 -04:00
Jeremiah Lowin	ba47db9b8c	Fix Azure scope validation (#2269) ... * Update docs for required scopes * add scopes * Fix Azure scope validation Azure returns unprefixed scopes in JWT tokens but requires prefixed scopes in authorization requests. The previous implementation incorrectly validated tokens against prefixed scopes, causing "invalid_token" errors. Simplified AzureProvider to use standard JWTVerifier with unprefixed scopes for validation. Scopes are only prefixed when building the Azure authorization URL via _build_upstream_authorize_url() override. Closes #2263	2025-10-26 11:41:22 -04:00
Jeremiah Lowin	d36ea42b92	Fix OAuth resource URL handling and WWW-Authenticate header (#1706)	2025-09-02 15:14:05 -04:00
Jeremiah Lowin	8c678b552b	Add resource_server_url parameter to OAuth proxy providers (#1682)	2025-08-30 08:33:13 -04:00
Jeremiah Lowin	c3d1176a69	Add WorkOS and Azure OAuth providers (#1550)	2025-08-20 16:22:03 -04:00