feat(oauth): Client ID Metadata Documents, consent screen, and opt-in DCR - #758

Merged

lakhansamani merged 17 commits into

mainfrom

feat/cimd-and-consent

Aug 13, 2026

Commits on Aug 11, 2026

feat(cimd): add the Client ID Metadata Document resolver
lakhansamani
committed
184167d
feat(cimd): add the consent screen and pending-consent flow
lakhansamani
committed
e0b58c9
feat(cimd): wire metadata-document clients into authorize and token
lakhansamani
committed
049351e
docs(cimd): changelog, and record why the browser leg has no e2e test
lakhansamani
committed
c7299a6
fix(cimd): unblock the consent POST and resume via redirect
lakhansamani
committed
1067512
test(cimd): add the e2e TLS fixture and browser spec
lakhansamani
committed
9204364
test(cimd): assert the consent flow in Go, scope Playwright to the UI
lakhansamani
committed
1924b5b
fix(cimd): honour prompt=none, and never resolve the reserved client as CIMD
lakhansamani
committed
bc6ce8e
security(cimd): bind consent grants to the request, and consume atomically
lakhansamani
committed
a1c8578

Commits on Aug 12, 2026

Commits on Aug 13, 2026