feat: implement RFC9728 OAuth Protected Resource Metadata discovery (take 2) - #730

Merged

ezynda3 merged 13 commits into

mark3labs:mainfrom

grafana:feat/rfc9728-take-2

Apr 21, 2026

Commits on Apr 9, 2026

feat: implement RFC9728 OAuth Protected Resource Metadata discovery

sd2k
and
claude
committed
8a71fab
fix: feed RFC9728 resource_metadata URL back to OAuthHandler and use RFC7235 parser

sd2k
and
claude
committed
2b9b2ea
Fix lint issues
sd2k
committed
639b22c
fix: add mutex to protect OAuth metadata state from concurrent access

sd2k
and
claude
committed
f513879
fix: protect baseURL under metadataMu and avoid fallback on explicit resource_metadata failure

sd2k
and
claude
committed
ac66824
fix: address CodeRabbit review feedback

sd2k
and
claude
committed
6b5d5d6

Commits on Apr 15, 2026

Merge branch 'main' into feat/rfc9728-take-2
sd2k
committed
13b29dc

Commits on Apr 17, 2026

fix(oauth): guard resourceURL with metadataMu

sd2k
and
claude
committed
22f6889

Commits on Apr 20, 2026

Merge remote-tracking branch 'upstream/main' into feat/rfc9728-take-2
sd2k
committed
9049f66
feat(oauth): origin-validate advertised PRM URLs (RFC 9728 §5.1)

sd2k
and
claude
committed
bbd4c23
feat(oauth): require resource binding on advertised PRM (RFC 9728 §3.3/§7.3)

sd2k
and
claude
committed
8c36a4d
chore(tests): prefer t.Context() over context.Background() in oauth tests

sd2k
and
claude
committed
aebbb83

Commits on Apr 21, 2026

Merge branch 'main' into feat/rfc9728-take-2
sd2k
committed
5f48775