key-cape/src/internal/server/oidc
tegwick e2c5a94782
Some checks failed
Authentication acceptance / acceptance (push) Failing after 1m4s
Authentication acceptance / provider-contract (push) Successful in 12s
Build and Publish Container Image / build-and-push (push) Successful in 31s
Bind online human ID tokens to the exact current access grant
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a14bfc-9643-7872-aa12-98326dcf25e7
2026-10-18 12:13:56 +02:00
..
account.go Style the NetKingdom sign-out confirmation like the account site. 2026-09-27 00:51:14 +02:00
account_test.go Style the NetKingdom sign-out confirmation like the account site. 2026-09-27 00:51:14 +02:00
assurance_time_test.go Answer the approver-client questions, and fix what checking them turned up 2026-09-09 14:25:38 +02:00
audience_test.go Add bounded resource audiences and enforce browser scope grants 2026-09-05 00:41:17 +02:00
authorize.go Add opt-in sign-in diagnosis page and uid/assurance on auth log (NK-WP-0051-T02). 2026-10-14 23:45:11 +02:00
authorize_test.go Link the MFA challenge to lost-authenticator help. 2026-10-14 18:29:33 +02:00
discovery.go Add opt-in issuer-owned access-token status and scoped revocation 2026-10-18 10:10:38 +02:00
discovery_test.go Carry the tenant claim's provenance, and correct a guard the ruling voided 2026-09-10 07:58:29 +02:00
handoff.go Finish KEY-WP-0008: registration handoff and client MFA isolation 2026-08-16 01:05:27 +02:00
handoff_test.go Finish KEY-WP-0008: registration handoff and client MFA isolation 2026-08-16 01:05:27 +02:00
hardening_test.go Harden the authorization-code grant and UserInfo verification 2026-09-06 22:43:47 +02:00
human_tenant_test.go Carry the tenant claim's provenance, and correct a guard the ruling voided 2026-09-10 07:58:29 +02:00
jwks.go feat: implement T05, T08, T13 — OIDC discovery, JWKS, telemetry pipeline 2026-03-13 01:35:34 +01:00
jwks_test.go feat: implement T05, T08, T13 — OIDC discovery, JWKS, telemetry pipeline 2026-03-13 01:35:34 +01:00
login_session.go Finish KEY-WP-0008: registration handoff and client MFA isolation 2026-08-16 01:05:27 +02:00
logout.go Finish KEY-WP-0008: registration handoff and client MFA isolation 2026-08-16 01:05:27 +02:00
native_optional_test.go Implement scoped P06 authentication policy and guarded optional onboarding 2026-09-14 00:00:05 +02:00
optional_mfa_test.go Support opt-in MFA per browser client with authoritative enrollment checks 2026-09-13 00:27:28 +02:00
policy_isolation_test.go Finish KEY-WP-0008: registration handoff and client MFA isolation 2026-08-16 01:05:27 +02:00
policy_runtime_test.go Implement scoped P06 authentication policy and guarded optional onboarding 2026-09-14 00:00:05 +02:00
principal_type_guard_test.go Close T04 and pin the single route by which a principal becomes human 2026-09-10 23:05:16 +02:00
session.go Answer the approver-client questions, and fix what checking them turned up 2026-09-09 14:25:38 +02:00
signin_diagnosis.go Add opt-in sign-in diagnosis page and uid/assurance on auth log (NK-WP-0051-T02). 2026-10-14 23:45:11 +02:00
signin_diagnosis_test.go Add opt-in sign-in diagnosis page and uid/assurance on auth log (NK-WP-0051-T02). 2026-10-14 23:45:11 +02:00
tenant_precondition_test.go Carry the tenant claim's provenance, and correct a guard the ruling voided 2026-09-10 07:58:29 +02:00
tenant_test.go Correct platform infrastructure client tenant bindings 2026-09-27 16:43:31 +02:00
token.go Bind online human ID tokens to the exact current access grant 2026-10-18 12:13:56 +02:00
token_pair_test.go Bind online human ID tokens to the exact current access grant 2026-10-18 12:13:56 +02:00
token_status.go Add opt-in issuer-owned access-token status and scoped revocation 2026-10-18 10:10:38 +02:00
token_status_discovery_test.go Add opt-in issuer-owned access-token status and scoped revocation 2026-10-18 10:10:38 +02:00
token_status_http.go Add opt-in issuer-owned access-token status and scoped revocation 2026-10-18 10:10:38 +02:00
token_status_internal_test.go Add opt-in issuer-owned access-token status and scoped revocation 2026-10-18 10:10:38 +02:00
token_status_test.go Add opt-in issuer-owned access-token status and scoped revocation 2026-10-18 10:10:38 +02:00
token_status_transport_test.go Add opt-in issuer-owned access-token status and scoped revocation 2026-10-18 10:10:38 +02:00
token_test.go Harden the authorization-code grant and UserInfo verification 2026-09-06 22:43:47 +02:00
userinfo.go Add opt-in issuer-owned access-token status and scoped revocation 2026-10-18 10:10:38 +02:00
userinfo_test.go Harden the authorization-code grant and UserInfo verification 2026-09-06 22:43:47 +02:00