feat: OAuth scope step-up via command metadata#18

Merged

jpage-godaddy merged 15 commits into

mainfrom

Jun 10, 2026

Commits on Jun 10, 2026

feat: OAuth scope step-up via command metadata

jpage-godaddy
and
claude
committed
fix: address Copilot review on scope step-up

jpage-godaddy
and
claude
committed
fix: drop redundant super:: qualification in union_scopes test

jpage-godaddy
and
claude
committed
docs: clarify CredentialResolver re-resolves on scope step-up

jpage-godaddy
and
claude
committed
fix: filter empty scope tokens; soften peek identity doc

jpage-godaddy
and
claude
committed
fix: robust TTY detection + keep CommandMeta scopes/auth_metadata consistent

jpage-godaddy
and
claude
committed
fix: clear empty scopes key; align test + decode_jwt_claims doc

jpage-godaddy
and
claude
committed
fix: include --env in non-interactive step-up login hint

jpage-godaddy
and
claude
committed
fix: save new token before evicting old in reauthenticate

jpage-godaddy
and
claude
committed
refactor: make CredentialRequest non_exhaustive with a constructor
jgowdy-godaddy
committed
fix: make OAuth scope coverage robust for opaque and scp tokens
jgowdy-godaddy
committed
fix: error when step-up cannot obtain the required scopes
jgowdy-godaddy
committed
fix: abort scope step-up that authenticates a different identity
jgowdy-godaddy
committed
docs: document HTTP step-up ordering for the bearer injector
jgowdy-godaddy
committed
Merge branch 'main' into scope-step-up
jpage-godaddy
authored