Support RFC 8693 token exchange for enterprise IdP flows (SEP-990) - #2988

Merged

Kludex merged 14 commits into

mainfrom

worktree-synthetic-stirring-treehouse

Jun 26, 2026

Commits on Jun 26, 2026

Support RFC 8693 token exchange for enterprise IdP flows (SEP-990)
Kludex
committed
e8df714
Preserve empty issuer/resource paths on AuthSettings
Kludex
committed
92fae82
Merge branch 'auth-settings-preserve-empty-path' into worktree-synthetic-stirring-treehouse
Kludex
committed
2c7cb17
Merge remote-tracking branch 'origin/main' into worktree-synthetic-stirring-treehouse
Kludex
committed
c7cacf0
Add end-to-end interaction tests for token exchange (SEP-990)
Kludex
committed
55c2413
Strengthen token-exchange interaction tests per review
Kludex
committed
b94851b
Use the RFC 7523 jwt-bearer grant for the SEP-990 ID-JAG leg
Kludex
committed
7783020
Harden the identity-assertion grant per review
Kludex
committed
0f4052c
Pin identity-assertion discovery to the expected authorization server
Kludex
committed
05f60ce
Don't broaden initial identity-assertion scope; normalize origin ports
Kludex
committed
6689e0a
Always send the configured scope on identity-assertion exchanges
Kludex
committed
4393b4b
Merge remote-tracking branch 'origin/main' into worktree-synthetic-stirring-treehouse
Kludex
committed
d011d3a
Make IdentityAssertionOAuthProvider a standalone httpx.Auth
maxisbey
committed
095f189
Merge remote-tracking branch 'origin/worktree-synthetic-stirring-treehouse' into worktree-synthetic-stirring-treehouse
maxisbey
committed
dfd458a