lab/authz-bridge
1
0
Fork 0
Code Issues 9 Pull requests 6 Projects Releases Packages Wiki Activity Actions 12

Public-client config: optional clientSecretRef (CRD + registry) #38

Merged
ginjiruu merged 1 commit from t32-public-client into master 2026-09-16 00:51:05 +00:00
Conversation 0 Commits 1 Files changed 8 +128 -31
ginjiruu commented 2026-09-16 00:38:14 +00:00
Owner
Copy link

Closes #32

Make OauthClient.spec.clientSecretRef optional. Its absence declares a Public client (no client secret): the Registry builds such an App as Available with SecretReady trivially true, and the structural gate relaxes so a client is valid with or without a well-formed secret ref. A present-but-malformed ref (non-nil, empty name) still degrades to InvalidSecretRef. Confidential clients are unchanged; an exchange-only App can now omit the secret it never uses.

  • New Shared.PublicClient flag; the snapshot forces SecretReady=true for public clients and the mirror skips the secret watch for them.
  • make manifests generate + make lint + make test green.

Part of the public-client + trio effort (spec #31).

Closes #32 Make `OauthClient.spec.clientSecretRef` optional. Its absence declares a **Public client** (no client secret): the Registry builds such an App as Available with `SecretReady` trivially true, and the structural gate relaxes so a client is valid with or without a well-formed secret ref. A present-but-malformed ref (non-nil, empty name) still degrades to `InvalidSecretRef`. Confidential clients are unchanged; an exchange-only App can now omit the secret it never uses. - New `Shared.PublicClient` flag; the snapshot forces `SecretReady=true` for public clients and the mirror skips the secret watch for them. - `make manifests generate` + `make lint` + `make test` green. Part of the public-client + trio effort (spec #31).
feat: optional clientSecretRef for public clients (#32)
Some checks failed
Lint / Run on Ubuntu (push) Has been cancelled
Details
E2E Tests / Run on Ubuntu (push) Has been cancelled
Details
Tests / Run on Ubuntu (push) Has been cancelled
Details
Lint / Run on Ubuntu (pull_request) Has been cancelled
Details
E2E Tests / Run on Ubuntu (pull_request) Has been cancelled
Details
Tests / Run on Ubuntu (pull_request) Has been cancelled
Details
b0e450a2f4
ginjiruu merged commit a566dd51b1 into master 2026-09-16 00:51:05 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
needs-info

   
needs-triage

   
ready-for-agent

   
ready-for-human

   
wontfix
No labels
needs-info
needs-triage
ready-for-agent
ready-for-human
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
lab/authz-bridge!38
No description provided.