Nick Steele 9b4a0f8a0a
Add enterprise IdP identity resolution for MCP OAuth ( #40739 ) ...
## What changed
- Resolve stored enterprise IdP sessions against discovered authorization
metadata, requiring the configured issuer, public-client authentication, and
supported ID-JAG token exchange capabilities.
- Bind OIDC identity claims and MCP resource indicators to their configured
issuer, client, and server, and require reauthentication when pinned keyring
credentials are removed or replaced.
- Hold the credential lock while rereading refresh tokens, and isolate
enterprise credentials by reserved namespace and Codex home.
## Testing
- Cover metadata and claim validation, resource binding, credential replacement
and keyring failures, refresh locking, expired ID tokens, and credential
namespace isolation.
GitOrigin-RevId: edce3c6159f7d6831edf72e9608b3fc3f5823c83
2026-08-25 23:51:57 +00:00
2026-08-24 22:40:35 +00:00
2026-08-25 21:38:10 +00:00
2026-08-25 23:42:50 +00:00
2026-08-18 23:05:52 +00:00
2026-08-25 21:38:10 +00:00
2026-08-25 03:08:33 +00:00
2026-08-24 21:39:48 +00:00
2026-08-20 08:10:08 +00:00
2026-08-25 07:37:42 +00:00
2026-08-24 21:39:48 +00:00
2026-08-20 19:28:32 +00:00
2026-08-11 03:39:02 +00:00
2026-08-14 05:03:39 +00:00
2026-08-17 22:37:14 +00:00
2026-08-25 20:37:15 +00:00
2026-08-25 16:38:46 +00:00
2026-08-25 21:34:05 +00:00
2026-08-25 20:37:15 +00:00
2026-08-25 20:37:15 +00:00
2026-08-25 20:37:15 +00:00
2026-08-21 16:50:34 +00:00
2026-08-25 21:38:10 +00:00
2026-08-18 23:47:00 +00:00
2026-08-13 23:13:37 +00:00
2026-08-25 21:20:51 +00:00
2026-08-25 22:50:49 +00:00
2026-08-04 22:58:02 +00:00
2026-08-25 23:51:57 +00:00
2026-08-07 00:23:38 +00:00
2026-08-23 18:53:15 +00:00
2026-08-25 23:42:50 +00:00
2026-08-25 21:20:51 +00:00
2026-08-25 20:26:23 +00:00
2026-08-07 11:30:17 +00:00
2026-08-13 00:00:16 +00:00
2026-08-25 19:54:52 +00:00
2026-08-25 23:38:49 +00:00
2026-08-25 23:38:49 +00:00
2026-08-17 04:37:50 +00:00
2026-08-25 22:29:14 +00:00
2026-08-25 17:13:50 +00:00
2026-08-25 19:30:21 +00:00
2026-08-18 21:46:18 +00:00
2026-08-25 18:04:01 +00:00
2026-08-25 21:34:05 +00:00
2026-08-25 01:03:20 +00:00
2026-08-25 10:29:26 +00:00
2026-08-17 00:09:44 +00:00
2026-08-10 22:12:14 +00:00
2026-08-24 00:52:52 +00:00
2026-08-25 21:08:22 +00:00
2026-08-25 03:08:33 +00:00
2026-08-25 10:29:26 +00:00
2026-08-24 21:39:48 +00:00
2026-08-21 19:04:32 +00:00
2026-08-24 21:39:48 +00:00
2026-08-25 18:41:03 +00:00
2026-08-25 22:46:49 +00:00
2026-08-21 21:01:59 +00:00
2026-08-25 15:50:19 +00:00
2026-08-25 23:42:50 +00:00
2026-08-15 01:34:33 +00:00
2026-08-21 16:45:05 +00:00
2026-08-25 23:51:57 +00:00
2026-08-25 22:46:49 +00:00
2026-08-24 17:07:21 +00:00
2026-08-25 05:16:45 +00:00
2026-08-10 15:43:10 +00:00
2026-08-20 17:39:06 +00:00
2026-08-08 16:58:26 +00:00
2026-08-20 06:10:03 +00:00
2026-08-25 22:46:49 +00:00
2026-08-04 03:49:53 +00:00
2026-08-20 18:29:35 +00:00
2026-08-25 21:38:10 +00:00
2026-08-25 22:01:26 +00:00
2026-08-25 22:19:19 +00:00
2026-08-25 23:42:50 +00:00
2026-08-20 14:55:08 +00:00
2026-08-25 18:41:03 +00:00
2026-08-15 14:31:04 +00:00
2026-08-25 21:44:43 +00:00
2026-08-25 21:44:43 +00:00
2026-08-25 21:34:05 +00:00
2026-08-18 22:00:25 +00:00
Nick Steele
9b4a0f8a0a