stacklok / toolhive / 34274954433

71%

Build Type

push

github

Committed by web-flow

Commit Message

Support OIDC dynamic client registration (#6544)

* Support OIDC dynamic client registration

OIDC-typed upstreams could not use Dynamic Client Registration, even
when their discovery metadata exposed a registration endpoint. This
forced operators to use the more verbose OAuth2 form and prevented
issuer-based OIDC configurations from working with providers such as
connector-gateway.

Add DCR configuration and validation to OIDC runtime and CRD types,
derive the standard discovery URL from the issuer when needed, and
route both OAuth2 and OIDC upstreams through the shared DCR resolver.
Propagate registered credentials into the OIDC provider, update
secret bindings and generated manifests, and cover the adapter
behavior with tests.

Fixes #6538

* Fix CI: reduce complexity, wrap long lines, regen swagger

buildUpstreamConfigs exceeded the cyclomatic complexity limit (19 > 15);
split its per-upstream loop body into buildOneUpstreamConfig,
validateUpstreamRunConfig, resolveUpstreamDCR, and
applyDCRResolutionToConfig. Also wrap two lines that exceeded the
line-length limit, and regenerate docs/server/swagger.* to include the
new dcr_config field on OIDCUpstreamConfig.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

Coverage Stats

109 of 194 new or added lines in 6 files covered. (56.19%)

10 existing lines in 4 files now uncovered.

79651 of 113351 relevant lines covered (70.27%)

92.3 hits per line