feat(ext-security): add an OAuth 2.1 authorization server #18

Merged

Relism merged 1 commits from feature/ext-security/oauth-server into master

2026-09-22 11:42:27 +00:00

Author	SHA1	Message	Date
Zakaria El OrcheandClaude Opus 5	f28fc43150	feat(ext-security): add an OAuth 2.1 authorization server flash-ext-security-oauth-server issues RFC 9068 access tokens (code + PKCE S256, CIMD and DCR clients, RFC 8707 resources, rotating refresh tokens) for resources on the application's own origin. Around it: SecurityExtension resolves a configured origin instead of X-Forwarded-* headers, mechanisms expose schemes() and a route can be restricted to some of them, McpConfig.mechanisms(...) uses that, OIDC bearers must be typed at+jwt, and PublicUrl guards outbound fetches against internal addresses. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-09-22 11:39:09 +00:00

Author

SHA1

Message

Date

Zakaria El OrcheandClaude Opus 5

f28fc43150

feat(ext-security): add an OAuth 2.1 authorization server

flash-ext-security-oauth-server issues RFC 9068 access tokens (code + PKCE S256,
CIMD and DCR clients, RFC 8707 resources, rotating refresh tokens) for resources on
the application's own origin. Around it: SecurityExtension resolves a configured
origin instead of X-Forwarded-* headers, mechanisms expose schemes() and a route can
be restricted to some of them, McpConfig.mechanisms(...) uses that, OIDC bearers must
be typed at+jwt, and PublicUrl guards outbound fetches against internal addresses.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-09-22 11:39:09 +00:00