[OPIK-8252] Answer 401 invalid_token on an expired OAuth token so hosts refresh - #182

Merged

awkoy merged 7 commits into

mainfrom

awkoy/OPIK-8252/oauth-401-on-expired-token

Sep 4, 2026

Commits on Sep 4, 2026

[OPIK-8252] Answer 401 invalid_token when an OAuth access token is dead

awkoy
and
claude
committed
97328f1
[OPIK-8252] Say "access token expired, retry" on a 401 under an OAuth bearer

awkoy
and
claude
committed
f26e47f
[OPIK-8252] Cache OAuth validation: TTL, eviction on backend 401, expires_at

awkoy
and
claude
committed
32e3506
[OPIK-8252] Review fixes: keep auth_context a leaf, retire the identity wrapper

awkoy
and
claude
committed
1654a70
[OPIK-8252] README: OAuth tokens are validated per request; document the cache TTL

awkoy
and
claude
committed
9070bb8
[OPIK-8252] Log fail-open introspection at WARNING with the reason

awkoy
and
claude
committed
d0c0209
[OPIK-8252] Forward the bearer of the current request on tools/call, not the handshake's

awkoy
and
claude
committed
13f3bd4