Tutorials: OAuth2#3020

Merged

rrayst merged 29 commits into

tutorials-oauth2

Jul 4, 2026

Commits on Jun 27, 2026

Commits on Jun 29, 2026

Merge branch 'master' into tutorials-oauth2
christiangoerdes
authored

Commits on Jul 1, 2026

Refactor and expand JWT and OAuth2 tutorials, update tests, and improve documentation
predic8
committed
fix(tutorials): update expected status code in JWT test to 401
predic8
committed

Commits on Jul 2, 2026

fix(tutorials): clarify endpoint configuration in OAuth2 Token Validation tutorial
predic8
committed
feat(oauth2): issue aud and scope claims in JWT access tokens

predic8
and
claude
committed
feat(oauth2): issue iss claim in JWT access tokens

predic8
and
claude
committed
feat(oauth2): make userDataProvider optional for user-less flows

predic8
and
claude
committed
improve(oauth2/jwt): log rejected tokens and expose validation details

predic8
and
claude
committed
feat(jwt): add expectedIss attribute to jwtAuth

predic8
and
claude
committed
fix(jwt): read scopes from RFC 9068 "scope" claim in JWTSecurityScheme

predic8
and
claude
committed
feat(jwt): load JWKS lazily when URIs are unreachable at startup

predic8
and
claude
committed
Merge branch 'master' into tutorials-oauth2
predic8
authored
feat(tutorials): migrate and reorganize OAuth2 and JWT tutorials with updated flows and tests
predic8
committed
feat(oauth2): add test to verify refresh token validity post-cleanup sweep
predic8
committed
fix(tutorials): update resource access message and add missing flow configuration
predic8
committed
feat(oauth2): implement refresh token rotation and add single-use test
predic8
committed

Commits on Jul 3, 2026

minor improvements
christiangoerdes
committed

Commits on Jul 4, 2026