Aurélien Sibiril cd8ddd8db5 Add public-client (CIMD) OAuth support ...

Public clients authenticate with PKCE and no client secret, using a
hosted Client ID Metadata Document (CIMD) as the client_id.

Add a no-secret token-endpoint mode, derive the state-token salt and the
PKCE verifier from a server-side key so the verifier never appears in
the signed-but-unencrypted state, and expose Registration.PublicClient,
Registry.PublicClients and the CIMD metadata path for provider wiring.

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>

2026-06-03 17:00:06 +02:00

..

accessreview

Fix lint issues

2026-06-02 11:59:21 +02:00

agent

Add async third-party vetting

2026-06-02 11:39:51 +02:00

agentruntest

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

awsconfig

Enforce Go style rules across codebase

2026-05-20 11:46:39 +04:00

baseurl

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

bearertoken

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

bootstrap

Add async third-party vetting

2026-06-02 11:39:51 +02:00

certmanager

Enforce Go style rules across codebase

2026-05-20 11:46:39 +04:00

cli

Enforce Go style rules across codebase

2026-05-20 11:46:39 +04:00

cmd

Add async third-party vetting

2026-06-02 11:39:51 +02:00

connector

Add public-client (CIMD) OAuth support

2026-06-03 17:00:06 +02:00

cookiebanner

Show tracker type in cookie tracking policy

2026-06-02 16:21:00 +02:00

coredata

Show tracker type in cookie tracking policy

2026-06-02 16:21:00 +02:00

crypto

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

deviceagent

Fix test linux

2026-05-26 15:02:50 -07:00

docgen

Show tracker type in cookie tracking policy

2026-06-02 16:21:00 +02:00

esign

Tailor signature certificate email copy for approvals

2026-05-21 14:49:19 +02:00

evidencedescriber

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

file

Fix lint issues from previous commit

2026-06-03 10:51:35 +02:00

filemanager

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

filesign

Fix lint issues from previous commit

2026-06-03 10:51:35 +02:00

filevalidation

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

geoloc

Uniformize enum style

2026-05-20 15:36:47 -07:00

gid

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

html2pdf

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

iam

Add async third-party vetting

2026-06-02 11:39:51 +02:00

llm

Drop obsolete LLM request sanitization test

2026-06-01 14:49:13 +02:00

mail

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

mailer

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

mailman

Remove useless error checks

2026-05-20 09:53:09 +04:00

net

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

page

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

pdfutils

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

probo

Use stable files API URLs for vendor logo fields

2026-06-03 10:30:29 +02:00

proboctl

Uniformize enum style

2026-05-20 15:36:47 -07:00

probod

Fix lint issues from previous commit

2026-06-03 10:51:35 +02:00

probodconfig

Add async third-party vetting

2026-06-02 11:39:51 +02:00

prosemirror

Enforce Go style rules across codebase

2026-05-20 11:46:39 +04:00

rfc5988

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

riskmanagement

Fix wsl_v5 lint errors and exclude node_modules from linting

2026-05-20 15:05:08 +04:00

saferedirect

Fix open redirect bypass in saferedirect

2026-05-26 11:41:33 -07:00

securecookie

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

securetoken

Fix non-constant-time string != comparison

2026-04-20 09:46:44 +02:00

server

Fix lint issues from previous commit

2026-06-03 10:51:35 +02:00

slack

Remove tenant service pattern

2026-05-20 16:51:15 -07:00

slug

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

statelesstoken

Fix non-constant-time string != comparison

2026-04-20 09:46:44 +02:00

thirdparty

Use stable files API URLs for vendor logo fields

2026-06-03 10:30:29 +02:00

trust

Use stable files API URLs for vendor logo fields

2026-06-03 10:30:29 +02:00

uri

Skip shared infrastructure in domain matching

2026-06-01 13:17:17 +02:00

validator

Style

2026-05-26 15:26:22 -07:00

version

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

vetting

Add async third-party vetting

2026-06-02 11:39:51 +02:00

webhook

Enforce Go style rules across codebase

2026-05-20 11:46:39 +04:00