Oauth-registration flow#2

Open

danlkv wants to merge 12 commits into

Commits on Jun 7, 2026

docs(x2): self-signed-identity flow + protocol/main spec updates

danlkv
and
claude
committed
feat(x2): id_token signing key + idtoken.js + jti-cache

danlkv
and
claude
committed
feat(x2): owners.js binding store + trial.js rate limit + csrf.js + proof.js

danlkv
and
claude
committed
feat(x2): register endpoints + consent/done/error views

danlkv
and
claude
committed
feat(x2): WS handshake proof verification; index.js wires x2 routes + replaces /host validation

danlkv
and
claude
committed
feat(host): codette login signs proof + polls status; auth.js handshake signer

danlkv
and
claude
committed
feat(host): WS connect with signed handshake; drop HOST_KEY mechanism

danlkv
and
claude
committed
test(x2): Playwright e2e + headless register helper; start-test-env update

danlkv
and
claude
committed
ops(x2): deployment artifacts (docker-compose, init.sh, README, run_dev)

danlkv
and
claude
committed
feat(x2): install.sh slim — binary + config.json only; ends with 'codette login'

danlkv
and
claude
committed
fix(x2): setJwtId → setJti (jose v6 API); extractable key for exportJWK; add jose+ws to test deps

danlkv
and
claude
committed
chore: update lockfiles after npm install cookie-parser

danlkv
and
claude
committed