stacklok / toolhive / 29750232147

69%

Build Type

push

github

Committed by web-flow

Commit Message

Wire token exchange handler into fosite (#5881)

Switch createProvider() from compose.Compose to NewAuthorizationServer
with factory adapters so the custom RFC 8693 token exchange handler can
be registered alongside the standard OAuth grant types.

- Add wrapComposeFactory adapter to bridge compose.Factory -> server.Factory
- Register tokenexchange.Factory in the extra-factories list
- Add DelegationTokenLifespan to Config (default 15m, max 24h) and
  RunConfig, parsed in runner/embeddedauthserver.go
- Add integration and config-validation test coverage

Token exchange is intentionally not advertised in discovery metadata
yet: it requires a confidential client, and no confidential-client
registration path exists on this branch, so advertising it would
describe a grant no issuable client can use.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Coverage Stats

72 of 88 new or added lines in 3 files covered. (81.82%)

72 existing lines in 5 files now uncovered.

75323 of 109630 relevant lines covered (68.71%)

72.78 hits per line