stacklok / toolhive / 24805002006

67%

Build Type

push

github

Committed by web-flow

Commit Message

Add shared OAuth constants and expose ExchangeConfig fields (#5003)

Add token-type URNs (access_token, id_token, jwt) and the
token-exchange grant-type URN to pkg/oauth, and replace private
constants in pkg/auth/tokenexchange with references to the shared
pkg/oauth definitions.

Expose RequestedTokenType and Resource fields on tokenexchange
ExchangeConfig so callers can request non-default token types
(RFC 8693) and specify an RFC 8707 resource indicator. Additional
URN constants (JWT-Bearer grant, ID-JAG token type) will be added
by the PRs that introduce their first consumers.

Enforce RFC 8707 Section 2 constraints on Resource in
ExchangeConfig.Validate(): reject non-absolute URIs and URIs with
a fragment component. The godoc already stated the contract; this
makes Validate() fail loudly at config time rather than forwarding
a bad resource indicator to the STS.

Regenerate docs/server/ to pick up the updated SubjectTokenType
godoc wording in tokenexchange.Config.

Coverage Stats

32 of 34 new or added lines in 2 files covered. (94.12%)

8 existing lines in 2 files now uncovered.

58778 of 88622 relevant lines covered (66.32%)

62.6 hits per line