feat: runtime inbound auth (Custom JWT) for agents#657

Merged

tejaskash merged 29 commits intomainfrom

refactor/shared-auth-modules

Mar 26, 2026

Commits on Mar 25, 2026

test: add integ tests for evaluator and online-eval resource lifecycle

Hweinstock
authored and
tejaskash
committed
test: remove redundant levels/rating-scales section

Hweinstock
authored and
tejaskash
committed
refactor: type readProjectConfig return as AgentCoreProjectSpec

Hweinstock
authored and
tejaskash
committed
refactor(schema): extract shared auth schemas to auth.ts
tejaskash
committed
refactor(tui): extract JWT config components to shared module
tejaskash
committed
refactor(primitives): extract shared auth utilities from GatewayPrimitive
tejaskash
committed
refactor(validation): extract shared JWT authorizer validation
tejaskash
committed
feat(schema): add authorizerType and authorizerConfiguration to AgentEnvSpec
tejaskash
committed
feat(tui): add inbound auth step to BYO agent wizard
tejaskash
committed
feat(cli): wire Runtime inbound auth to AgentPrimitive and CLI flags
tejaskash
committed
fix(tui): add missing OAuth credential creation in BYO agent path
tejaskash
committed
test(integ): add integration tests for agent inbound auth CLI flags
tejaskash
committed
feat(tui): add inbound auth to all agent paths (create, BYO, import)
tejaskash
committed
fix: wire auth config through useCreateFlow (agentcore create path)
tejaskash
committed
feat(invoke): add bearer token auth for CUSTOM_JWT agents
tejaskash
committed
revert: remove allowEmpty from requestHeaderAllowlist TextInputs
tejaskash
committed
feat(invoke): auto-fetch OAuth token for CUSTOM_JWT agents
tejaskash
committed
fix(invoke): silently skip token auto-fetch when no OAuth credential exists
tejaskash
committed
fix(invoke): use Ctrl+T and Ctrl+R for token shortcuts
tejaskash
committed
refactor(invoke): replace key shortcuts with dedicated token screen
tejaskash
committed
feat(fetch): extend fetch access to support agents
tejaskash
committed
feat(tui): extend fetch access screen to support both gateways and agents
tejaskash
committed
fix(tui): handle agent fetch access gracefully without OAuth credentials
tejaskash
committed
fix(tui): gate auth screen behind advanced config and fix lint errors
tejaskash
committed
fix(tui): fetch agent token directly instead of pre-check in fetch access
tejaskash
committed
fix(fetch): use _CLIENT_SECRET suffix when reading OAuth secret from env
tejaskash
committed
fix(ci): add @aws-sdk/client-cognito-identity-provider dev dependency
tejaskash
committed
style: fix prettier formatting across all changed files
tejaskash
committed

Commits on Mar 26, 2026

fix: wire auth config through handleCreatePath for template agents
tejaskash
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: runtime inbound auth (Custom JWT) for agents#657

feat: runtime inbound auth (Custom JWT) for agents#657
tejaskash merged 29 commits intomainfrom
refactor/shared-auth-modules

Commits on Mar 25, 2026

test: add integ tests for evaluator and online-eval resource lifecycle

test: remove redundant levels/rating-scales section

refactor: type readProjectConfig return as AgentCoreProjectSpec

refactor(schema): extract shared auth schemas to auth.ts

refactor(tui): extract JWT config components to shared module

refactor(primitives): extract shared auth utilities from GatewayPrimitive

refactor(validation): extract shared JWT authorizer validation

feat(schema): add authorizerType and authorizerConfiguration to AgentEnvSpec

feat(tui): add inbound auth step to BYO agent wizard

feat(cli): wire Runtime inbound auth to AgentPrimitive and CLI flags

fix(tui): add missing OAuth credential creation in BYO agent path

test(integ): add integration tests for agent inbound auth CLI flags

feat(tui): add inbound auth to all agent paths (create, BYO, import)

fix: wire auth config through useCreateFlow (agentcore create path)

feat(invoke): add bearer token auth for CUSTOM_JWT agents

revert: remove allowEmpty from requestHeaderAllowlist TextInputs

feat(invoke): auto-fetch OAuth token for CUSTOM_JWT agents

fix(invoke): silently skip token auto-fetch when no OAuth credential exists

fix(invoke): use Ctrl+T and Ctrl+R for token shortcuts

refactor(invoke): replace key shortcuts with dedicated token screen

feat(fetch): extend fetch access to support agents

feat(tui): extend fetch access screen to support both gateways and agents

fix(tui): handle agent fetch access gracefully without OAuth credentials

fix(tui): gate auth screen behind advanced config and fix lint errors

fix(tui): fetch agent token directly instead of pre-check in fetch access

fix(fetch): use _CLIENT_SECRET suffix when reading OAuth secret from env

fix(ci): add @aws-sdk/client-cognito-identity-provider dev dependency

style: fix prettier formatting across all changed files

Commits on Mar 26, 2026

fix: wire auth config through handleCreatePath for template agents