Author	SHA1	Message	Date
Jakub Hrozek	1059f59a27	internal/oauthex: fix GetProtectedResourceMetadataFromHeader validation (#561) ... GetProtectedResourceMetadataFromHeader was validating the resource field against the metadata endpoint URL instead of the original server URL. Per RFC 9728 section 3.3, the resource field must match the URL that the client used to make the request to the resource server. Fixes: #560	2025-10-08 09:30:51 -04:00
Sam Thanawalla	9348d33b75	oauthex: move internal/oauthex to oauthex (#559) ... This PR relocates oauthex and moves DCR logic into dcr.go. Fixes #558	2025-10-07 08:39:49 -04:00

Renamed from internal/oauthex/resource_meta.go (Previous history)