crates/didbot-serve/src/oauth · didbot · Tangled

permadeath.com / didbot

Identities for entities did.bot

agent llm did

didbot crates didbot-serve src oauth

12 files

at commit 18ba4fe0

@permadeath.com · fix(oauth)!: check a DPoP proof's ath, and bound what an unauthenticated proof costs · 1mo ago

feat(serve): mark a narrowed consent page as covering the whole request

client_metadata.rs

fix(oauth)!: ask the gate before fetching a client_id, and bound the metadata cache

fix(oauth)!: issue a login at what the agent approved, not at the whole request

fix(oauth)!: displace an account's oldest pending sign-in, not its newest

feat(oauth): publish oauth-protected-resource metadata

fix(oauth)!: check a DPoP proof's ath, and bound what an unauthenticated proof costs

fix(oauth)!: check a DPoP proof's ath, and bound what an unauthenticated proof costs

fix(oauth)!: refuse a pushed request without response_type=code

fix(oauth)!: check a DPoP proof's ath, and bound what an unauthenticated proof costs

fix(oauth)!: ask the gate before fetching a client_id, and bound the metadata cache

fix(oauth): bound the scope grammar before parsing it

fix(oauth)!: check a DPoP proof's ath, and bound what an unauthenticated proof costs