lab/authz-bridge
1
0
Fork 0
Code Issues 9 Pull requests 6 Projects Releases Packages Wiki Activity Actions 12

Exchange Flow to hstern/go-token-exchange #42

Merged
ginjiruu merged 1 commit from t35-exchange-hstern into master 2026-09-16 00:51:26 +00:00
Conversation 0 Commits 1 Files changed 4 +36 -60
ginjiruu commented 2026-09-16 00:38:45 +00:00
Owner
Copy link

Closes #35

Replace the hand-rolled RFC 8693 token-exchange with github.com/hstern/go-token-exchange. client_id is sent via the library's Extra (form body, Kanidm); no client secret, no actor fields. The per-replica token cache, the exchanged-token Authorization injection, and the subject-token consumption are unchanged.

  • Zero-dependency and wire-faithful to Kanidm (the library has no secret mechanism and omits zero-valued actor fields).
  • make lint + make test green.

Independent of the OIDC serve chain. Part of the public-client + trio effort (spec #31).

Closes #35 Replace the hand-rolled RFC 8693 token-exchange with `github.com/hstern/go-token-exchange`. `client_id` is sent via the library's `Extra` (form body, Kanidm); **no client secret, no actor fields**. The per-replica token cache, the exchanged-token `Authorization` injection, and the subject-token consumption are unchanged. - Zero-dependency and wire-faithful to Kanidm (the library has no secret mechanism and omits zero-valued actor fields). - `make lint` + `make test` green. Independent of the OIDC serve chain. Part of the public-client + trio effort (spec #31).
refactor: Exchange Flow uses hstern/go-token-exchange (#35)
Some checks failed
Lint / Run on Ubuntu (push) Has been cancelled
Details
E2E Tests / Run on Ubuntu (push) Has been cancelled
Details
Tests / Run on Ubuntu (push) Has been cancelled
Details
Tests / Run on Ubuntu (pull_request) Has been cancelled
Details
Lint / Run on Ubuntu (pull_request) Has been cancelled
Details
E2E Tests / Run on Ubuntu (pull_request) Has been cancelled
Details
22ef69ab26
ginjiruu merged commit bf96755a0f into master 2026-09-16 00:51:26 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
needs-info

   
needs-triage

   
ready-for-agent

   
ready-for-human

   
wontfix
No labels
needs-info
needs-triage
ready-for-agent
ready-for-human
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
lab/authz-bridge!42
No description provided.