fix(identity-webhook): OIDC composite app_<24hex>_<secret> token exchange#63

Merged

eliteprox merged 8 commits into

mainfrom

feat/composite-app-token-exchange

Jul 17, 2026

Commits on Jul 11, 2026

Commits on Jul 16, 2026

Merge branch 'main' into feat/composite-app-token-exchange
eliteprox
committed
fix(identity-webhook): address PR #63 review and OIDC hardening
eliteprox
committed
fix(identity-webhook): accept trailing-slash iss; guard exchange cache races
eliteprox
committed
fix(identity-webhook): improve bearerToken function for better token extraction
eliteprox
committed
refactor(identity-webhook): simplify bearerToken function for token extraction
eliteprox
committed
fix(identity-webhook): reject exchange URL userinfo; document HTTPS
eliteprox
committed