feat(oauth): add RFC 7523 private_key_jwt client authentication#163

Open

appleboy wants to merge 13 commits into

mainfrom

feat/private-key-jwt-rfc7523

Commits on Apr 12, 2026

feat(oauth): add RFC 7523 private_key_jwt client authentication

appleboy
and
claude
committed
fix(oauth): address Copilot review on private_key_jwt PR

appleboy
and
claude
committed
fix(oauth): address second-round Copilot review

appleboy
and
claude
committed
fix(oauth): address third-round Copilot review

appleboy
and
claude
committed
refactor(oauth): address fourth-round Copilot review

appleboy
and
claude
committed
fix(oauth): address fifth-round Copilot review

appleboy
and
claude
committed
fix(oauth): use dedicated sentinel for missing jti cache

appleboy
and
claude
committed
fix(oauth): address sixth-round Copilot review

appleboy
and
claude
committed
fix(oauth): enforce secret auth method + drop misleading Basic challenge

appleboy
and
claude
committed
fix(oauth): roll back JWKS refresh reservation on failure + reject overflowing RSA exponent

appleboy
and
claude
committed
refactor(oauth): fix stale docstring and surface key-gen errors in tests

appleboy
and
claude
committed
fix(oauth): reject private_key_jwt with incompatible grants

appleboy
and
claude
committed
fix(oauth): evict stale JWKS on Set failure + advertise jwk-set Accept

appleboy
and
claude
committed