All pull requests

Pull requests

• fix: validate client_assertion expiration time to ensure it is less than the maximum allowed lifetime

  #1130·ybelMekk opened Oct 21, 2026Contributor·

  ·
  1

  3

• feat: publish docker image to Google Artifact Registry

  chore
  #1125·ybelMekk opened Oct 19, 2026Contributor·

  ·
  1

• fix: reject refresh token requests for scope that was not granted

  fix
  #1124·ybelMekk opened Oct 18, 2026Contributor·

  ·
  1

  2

• fix: reject unknown refresh tokens when a token callback is enqueued

  fix
  #1121·ybelMekk opened Oct 18, 2026Contributor·

  ·
  1

  1

• fix: reject authorization codes redeemed at a different issuer

  fixsecurity findings
  #1106·ybelMekk opened Oct 16, 2026Contributor·

  ·
  1

  4

• fix: send authorize endpoint errors to the client and advertise only the code response type

  breaking
  #1091·ybelMekk opened Oct 15, 2026Contributor·

  ·
  1

  6

• fix: bind authorization codes to client_id and redirect_uri

  breakingsecurity findings
  #1069·ybelMekk opened Oct 14, 2026Contributor·

  ·
  1

  16

• feat: add ${key[i]} template indexing with configurable value separator

  enhancement
  #1056·d-lopes opened Oct 12, 2026Contributor·

  ·

• feat: resolve request-mapping claims from login_hint authorize param

  enhancement
  #1045·d-lopes opened Oct 4, 2026Contributor·

  ·
  1

  13