feat: Config-driven opt-in authentication registry with multi-platform support#2393

Draft

Copilot wants to merge 9 commits intomainfrom

copilot/add-authentication-provider-registry

Commits on Apr 28, 2026

Initial plan
Copilot
authored
feat: add authentication provider registry (GitHub + Azure DevOps)

Copilot
and
mnriem
authored
feat: add try-each-provider HTTP helper and wire all catalog fetches through auth registry
mnriem
committed
fix: address review — fix stale docstrings, restore Accept header, add extra_headers to open_url
mnriem
committed
feat: config-driven opt-in auth via ~/.specify/auth.json
mnriem
committed
fix: address review — unused imports, host normalization, provider+scheme validation, security hardening
mnriem
committed
fix: reject unknown providers, validate azure-ad fields, strip Authorization from extra_headers
mnriem
committed
fix: extract shared auth test helpers, global config isolation, align docstring
mnriem
committed
fix: preserve auth header across multi-hop redirect chains
mnriem
committed