Author	SHA1	Message	Date
Jack Amadeo	81745f1375	fix(auth): validate discovered metadata issuer (#996) ... * fix(auth): validate discovered metadata issuer Validate authorization server metadata issuers against the issuer implied by standard discovery URLs before trusting advertised endpoints. fixes #983 * test(auth): add required issuer to authorization-server mock metadata --------- Co-authored-by: Alex Hancock <alexhancock@block.xyz>	2026-07-16 16:55:11 -04:00
King Star	3c5ce2b0d7	fix(auth): align OAuth metadata discovery ordering (#887)	2026-06-22 11:34:18 -04:00
Dale Seo	bb6c8043bf	feat: implement OAuth 2.0 Client Credentials flow (#707) ... * feat: implement OAuth 2.0 Client Credentials flow * fix: address SEP-1046 review findings * fix: validate HTTPS on JWT token endpoint	2026-03-03 20:53:51 -05:00