6 commits

Author	SHA1	Message	Date
Jeremiah Lowin	ea529f6a49	feat: make upstream_client_secret optional in OAuthProxy (#3486) ... * feat: make upstream_client_secret optional in OAuthProxy Extract _create_upstream_oauth_client() factory method for subclass override. Cookie signing falls back to JWT key material when no secret. * fix: include client_id in revocation requests for public clients * fix: use factory method for revocation auth	2026-03-15 11:14:56 -04:00
Jeremiah Lowin	799c4f1673	Escape client_id in OAuth consent details (#3418) ... 🤖 Generated with GPT-5.2-Codex	2026-03-06 17:33:12 -05:00
Jeremiah Lowin	880d835ccc	Add CIMD (Client ID Metadata Document) support for OAuth (#2871)	2026-02-06 13:44:52 -05:00
claude[bot]	cec40b378d	Use MemoryStore for OAuth proxy tests ... Updated all OAuthProxy test instantiations to use MemoryStore instead of defaulting to DiskStore, avoiding SQLite timeout issues on Windows and improving test performance. Co-authored-by: Bill Easton <strawgate@users.noreply.github.com>	2026-02-01 02:30:05 +00:00
Abhijeeth Padarthi	cee99d1210	Normalize resource URLs before comparison to support RFC 8707 query parameters (#2967) ... Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2026-01-22 19:41:02 -05:00
Jeremiah Lowin	23bfdf0680	Consolidate test fixtures and refactor large test files (#2941)	2026-01-19 15:18:35 -05:00