-
Notifications
You must be signed in to change notification settings - Fork 0
Pull requests: antstanley/oidc-exchange
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
docs(spec): a security baseline for reference deployments, enforced in CI
#34
opened Aug 5, 2026 by
antstanley
Owner
•
15/16
•
Draft
docs(spec): one owned outbound HTTP boundary
#33
opened Aug 5, 2026 by
antstanley
Owner
•
9/16
•
Draft
docs(spec): eliminate secret leakage in logs, spans, and error responses
#31
opened Aug 5, 2026 by
antstanley
Owner
•
13/16
•
Draft
docs(spec): harden the release and dependency supply chain
#30
opened Aug 5, 2026 by
antstanley
Owner
•
14/16
•
Draft
docs(spec): apply merged change-spec blocks that never reached the canonical pages
#29
opened Aug 5, 2026 by
antstanley
Owner
•
1/16
•
Draft
docs(spec): index the 2026-08-05 security change specs
#28
opened Aug 5, 2026 by
antstanley
Owner
•
16/16
•
Draft
docs(spec): one owned request-normalisation boundary across the five runtime shapes
#27
opened Aug 5, 2026 by
antstanley
Owner
•
12/16
•
Draft
docs(spec): harden and separate the administrative plane
#26
opened Aug 5, 2026 by
antstanley
Owner
•
11/16
•
Draft
docs(spec): fail closed across config, adapters, and the installer
#25
opened Aug 5, 2026 by
antstanley
Owner
•
3/16
•
Draft
docs(spec): audit and throttle authentication failures
#24
opened Aug 5, 2026 by
antstanley
Owner
•
4/16
•
Draft
docs(spec): resolve placeholders on every configuration entry point
#23
opened Aug 5, 2026 by
antstanley
Owner
•
2/16
•
Draft
docs(spec): rotate refresh tokens on redemption, with reuse detection
#22
opened Aug 5, 2026 by
antstanley
Owner
•
8/16
•
Draft
docs(spec): make grant_type binding at POST /token
#21
opened Aug 5, 2026 by
antstanley
Owner
•
6/16
•
Draft
docs(spec): bind the direct ID-token grant to a nonce and make it single-use
#20
opened Aug 5, 2026 by
antstanley
Owner
•
7/16
•
Draft
docs(spec): validate every claim on the token /revoke acts on
#19
opened Aug 5, 2026 by
antstanley
Owner
•
5/16
•
Draft
docs(spec): verify the admin console session JWT against the service JWKS
#18
opened Aug 5, 2026 by
antstanley
Owner
•
10/16
•
Draft
ProTip!
no:milestone will show everything without a milestone.