feat(oauth)!: require client secret for confidential device-code grant#255

Open

appleboy wants to merge 5 commits into

mainfrom

worktree-issue-209

Commits on Jun 16, 2026

feat(oauth)!: require client secret for confidential device-code grant
appleboy
committed

Commits on Jun 17, 2026

fix(oauth): authenticate confidential device client before revealing grant state

appleboy
and
claude
committed
fix(oauth): base device-code client auth on uncached source-of-truth record

appleboy
and
claude
committed
fix(oauth): fail closed on unrecognized client_type in device-code auth

appleboy
and
claude
committed

Commits on Jun 20, 2026

fix(oauth): fail closed on unrecognized client_type across grants

appleboy
and
claude
committed