2 Commits

Include renames

Author	SHA1	Message	Date
Zakaria El OrcheandClaude Opus 5	f28fc43150	feat(ext-security): add an OAuth 2.1 authorization server ... flash-ext-security-oauth-server issues RFC 9068 access tokens (code + PKCE S256, CIMD and DCR clients, RFC 8707 resources, rotating refresh tokens) for resources on the application's own origin. Around it: SecurityExtension resolves a configured origin instead of X-Forwarded-* headers, mechanisms expose schemes() and a route can be restricted to some of them, McpConfig.mechanisms(...) uses that, OIDC bearers must be typed at+jwt, and PublicUrl guards outbound fetches against internal addresses. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-09-22 11:39:09 +00:00
Zakaria El Orche	e0795299fc	refactor(ext-oidc): replace auth modules with security extensions	2026-09-16 15:54:19 +00:00