coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add native verified login and service-token commands
All checks were successful
Build and Publish Container Image / build-and-push (push) Successful in 41s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06e87-e039-7ed2-b85c-20ad37f8a21b
This commit is contained in:
tegwick 2026-09-05 01:08:58 +02:00
parent 66df5fcf07
commit b989de4e90
12 changed files with 928 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

9
README.md
View file

@ -267,3 +267,12 @@ Part of the **NetKingdom** domain. Tracked in the Custodian State Hub under
domain `netkingdom`, repo slug `key-cape`.
See `CLAUDE.md` for agent session protocol and workplan conventions.
## Native authentication commands
`keycape service-token` exchanges a custody-injected client secret for a verified
JWT; `keycape login` performs public-client browser PKCE login. Both save tokens
to a new private file outside Git and never print token values. See
[Native caller authentication](docs/native-authentication.md) for usage, supported
bindings, renewal, and the distinction from OpenBao login.