stacklok / toolhive / 23647201639

65%

push

github

feat: add authorizationEndpointBaseUrl override to embedded auth server (#4396)

Add optional authorizationEndpointBaseUrl field to EmbeddedAuthServerConfig that overrides only the authorization_endpoint in the OAuth discovery document
When set, the discovery document advertises {authorizationEndpointBaseUrl}/oauth/authorize instead of {issuer}/oauth/authorize; all other endpoints (token, registration, JWKS) remain derived from issuer
This enables deployments where the browser-facing authorization endpoint needs to be on a different host than the issuer used for backend-to-backend calls

71 of 71 new or added lines in 6 files covered. (100.0%)

52433 of 80192 relevant lines covered (65.38%)

65.12 hits per line