* Server Settings: disambiguate EMA OAuth credential fields (#1692)
Under enterprise-managed authorization the OAuth Settings "Client ID" /
"Client Secret" fields hold the *resource authorization server* credentials
(EMA leg 3 — the Test Client from the xaa.dev resource registration), not the
app/IdP pair configured in Client Settings. The unqualified labels sat under a
toggle naming the enterprise IdP, pulling readers toward the wrong pair.
- When enterpriseManaged is on, relabel to "Resource AS Client ID" /
"Resource AS Client Secret" and add a description naming the resource
authorization server and pointing the app pair back to Client Settings.
- Document the Scopes delimiter: space-separated (RFC 6749), with a warning
that commas produce one invalid token, plus a placeholder example.
Adds tests for both label states and the scopes hint, plus an
EnterpriseManagedOAuth story.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XNdjEPKLG637X8YmhDiEk5
* pr-screenshots: OAuth EMA field disambiguation proof shots (#1692)
Add before/after screenshots of the Server Settings → OAuth Settings fields
(EMA off = plain Client ID/Secret; EMA on = Resource AS Client ID/Secret) plus
the new space-separated Scopes hint, with a README section documenting them.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XNdjEPKLG637X8YmhDiEk5
* Address review: genericize EMA copy, reuse enterpriseManaged const (#1692)
- Drop the hardcoded xaa.dev staging host from the resource-AS field
description (it's a general EMA concept, not env-specific); phrase it as
"the resource authorization server's registered client credential (EMA leg
3)". Also trims the copy's overlap with the checkbox description.
- Reuse the existing `enterpriseManaged` const for the EMA Checkbox's `checked`
prop instead of recomputing `settings.enterpriseManaged ?? false`.
- Update the test assertion and pr-screenshots README/EMA-on screenshot to
match the new copy.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XNdjEPKLG637X8YmhDiEk5
* Client Settings: mirror EMA disambiguation (IdP-qualified labels) (#1692)
The Server Settings OAuth fields now label the leg-3 resource-AS pair
explicitly; make Client Settings parallel so each modal names its pair and
points at where the other lives.
- Relabel the EMA credential fields to "IdP Client ID" / "IdP Client Secret"
(parallel to Server Settings' "Resource AS Client ID/Secret"), so the label
alone disambiguates without relying on the description.
- Add the reciprocal cross-reference to each description: these are the
enterprise IdP pair (EMA legs 1–2), not the per-server resource authorization
server credentials, which go in Server Settings → OAuth Settings.
- Update ClientSettingsForm/ClientSettingsModal tests for the new labels; add a
pr-screenshots section + Client Settings screenshot.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XNdjEPKLG637X8YmhDiEk5
---------
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
402d7b204d