stacklok / toolhive / 21599980441

push

github

Embedded Auth Server Runner Integration (#3540)

Introduces the `EmbeddedAuthServer` wrapper in `pkg/authserver/runner/` that bridges serializable configuration with the authorization server runtime. The wrapper:

- Transforms `authserver.RunConfig` (file paths, env var names) to `authserver.Config` (resolved values) at runtime
- Loads signing keys from PEM files with fallback support for key rotation
- Reads HMAC secrets from files for signing authorization codes and refresh tokens
- Resolves upstream client secrets from files or environment variables
- Performs OIDC discovery to automatically populate authorization/token endpoints
- Supports both OIDC and pure OAuth2 upstream provider types

194 of 214 new or added lines in 1 file covered. (90.65%)

39953 of 65887 relevant lines covered (60.64%)

76.58 hits per line