4 Commits

Include renames

Author	SHA1	Message	Date
Zakaria El Orche	e0795299fc	refactor(ext-oidc): replace auth modules with security extensions	2026-09-16 15:54:19 +00:00
Zakaria El Orche	9d39e24ccb	refactor(ext-auth): generic sessions, shared annotation wiring, rename to flash-ext-auth-oidc ... AuthMiddleware.install(ctx, config, source) now owns the annotation processor and the flash.auth.policy key, so a second credential source gets annotation-driven authorization without copying the wiring. The key is public: an extension that contributes middleware can order itself around authentication. OidcSession becomes Session in auth-core, carrying claims, an expiry and an opaque attribute map. OpenID Connect keeps its access, id and refresh tokens in that map under its own keys, so renewal stays its business and core has no OAuth2 vocabulary in it. isAccessTokenExpired() becomes isExpired(), with the 30s eager-renewal window it always had and now a test for it. flash-ext-oidc is renamed flash-ext-auth-oidc, matching cache-core/cache-caffeine and data-core/data-hibernate.	2026-09-10 19:06:15 +00:00
Zakaria El Orche	891ef99b8e	refactor(core): make boot and middleware ordering deterministic	2026-08-12 16:42:49 +00:00
Zakaria El OrcheandClaude Sonnet 5	d7f36a7aea	feat(ext-mcp): add MCP (Model Context Protocol) server extension ... Streamable HTTP transport (JSON-RPC 2.0 over POST), one-class-per-tool/resource/prompt API mirroring RequestHandler, boot-time-precompiled schema/list payloads for a zero-alloc hot path, and optional OAuth2 protection built on flash-ext-oidc (lazy-loaded, RFC 8707 audience binding, RFC 9728 Protected Resource Metadata). Registers the module in the root and flash-extensions POMs and adds the ext-mcp commit scope to AGENTS.md. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-11 00:22:40 +00:00