Bereket Engida 692d96bd49 fix(auth): identify accounts by providerId and accountId again ...

Remove the account issuer column introduced in 1.7.0 together with
account.identityStrategy, the accountIssuer provider option, and the
guided auth migrate plan/apply workflow. Accounts are recognized by
(providerId, accountId) as in 1.6.

2026-09-03 21:13:04 -07:00

..

middleware

…

oauthClient

feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings (#10703)

2026-08-06 05:32:06 +00:00

oauthConsent

feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings (#10703)

2026-08-06 05:32:06 +00:00

oauthResource

feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings (#10703)

2026-08-06 05:32:06 +00:00

types

fix(oauth-provider): handle voluntary and essential ACR requests (#10790)

2026-08-13 19:10:36 +00:00

utils

fix(oauth-provider): accept issuer audience for client assertions (#10811)

2026-08-14 17:35:53 +00:00

authentication-context.ts

fix(oauth-provider): handle voluntary and essential ACR requests (#10790)

2026-08-13 19:10:36 +00:00

authorize.test.ts

fix(origin-check): support fragments in relative redirect URLs (#10983)

2026-08-25 10:12:21 +00:00

authorize.ts

fix(origin-check): support fragments in relative redirect URLs (#10983)

2026-08-25 10:12:21 +00:00

backchannel-logout.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

claim-authority.integration.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

claims-request.ts

fix(oauth-provider): handle voluntary and essential ACR requests (#10790)

2026-08-13 19:10:36 +00:00

claims.test.ts

feat(oauth-provider): expose sessionId to id_token claim contributors (#10113)

2026-06-17 11:53:30 +00:00

claims.ts

feat(oauth-provider): expose sessionId to id_token claim contributors (#10113)

2026-06-17 11:53:30 +00:00

client-jwks.test.ts

feat(oauth-provider)!: align MCP authorization with 2026-07-28 (#10577)

2026-07-30 21:42:14 -04:00

client-jwks.ts

feat(oauth-provider)!: align MCP authorization with 2026-07-28 (#10577)

2026-07-30 21:42:14 -04:00

client-metadata.ts

feat(oauth-provider)!: align MCP authorization with 2026-07-28 (#10577)

2026-07-30 21:42:14 -04:00

client-resource.test.ts

feat(scim)!: decouple provisioning from the organization plugin (#10390)

2026-07-16 11:17:06 +01:00

client-resource.ts

feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings (#10703)

2026-08-06 05:32:06 +00:00

client.ts

refactor(oauth-provider)!: separate device grant ownership (#10746)

2026-08-11 19:45:23 +00:00

consent.ts

feat(oauth-provider): honor requested UserInfo claims via a claim registry (#10156)

2026-06-19 18:08:35 -07:00

continue.ts

fix: address bug findings across packages (#9974)

2026-06-09 19:46:12 -07:00

device-code.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

device-code.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

dpop.ts

feat(oauth-provider): add DPoP support (#10039)

2026-06-14 18:28:21 -07:00

extensions.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

extensions.ts

feat(oauth-provider)!: align MCP authorization with 2026-07-28 (#10577)

2026-07-30 21:42:14 -04:00

index.ts

refactor(oauth-provider)!: separate device grant ownership (#10746)

2026-08-11 19:45:23 +00:00

internal.ts

feat(oauth-provider)!: align MCP authorization with 2026-07-28 (#10577)

2026-07-30 21:42:14 -04:00

introspect.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

introspect.ts

feat(oauth-provider): honor requested UserInfo claims via a claim registry (#10156)

2026-06-19 18:08:35 -07:00

logout.test.ts

fix(oauth-provider): complete RP-initiated logout flow (#10812)

2026-08-14 17:35:54 +00:00

logout.ts

fix(oauth-provider): complete RP-initiated logout flow (#10812)

2026-08-14 17:35:54 +00:00

metadata.test.ts

feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings (#10703)

2026-08-06 05:32:06 +00:00

metadata.ts

fix(oauth-provider): handle voluntary and essential ACR requests (#10790)

2026-08-13 19:10:36 +00:00

no-store.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

oauth-endpoint.integration.test.ts

fix(oauth-provider): complete RP-initiated logout flow (#10812)

2026-08-14 17:35:54 +00:00

oauth-endpoint.test.ts

…

oauth-endpoint.ts

feat(oauth-provider)!: enforce max_age (#9936)

2026-06-09 19:36:30 -07:00

oauth.test.ts

fix(auth): identify accounts by providerId and accountId again

2026-09-03 21:13:04 -07:00

oauth.ts

fix(oauth-provider): complete RP-initiated logout flow (#10812)

2026-08-14 17:35:54 +00:00

oidc-rs256-profile.test.ts

fix(oauth-provider): handle voluntary and essential ACR requests (#10790)

2026-08-13 19:10:36 +00:00

pairwise.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

pkce-optional.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

private-key-jwt-e2e.test.ts

feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings (#10703)

2026-08-06 05:32:06 +00:00

private-key-jwt.test.ts

fix(oauth-provider): accept issuer audience for client assertions (#10811)

2026-08-14 17:35:53 +00:00

public-types.test.ts

feat(oauth-provider)!: align MCP authorization with 2026-07-28 (#10577)

2026-07-30 21:42:14 -04:00

register.test.ts

fix(oauth-provider): backport CIMD grant intersection (#11010)

2026-08-26 14:13:59 +00:00

register.ts

fix(oauth-provider): backport CIMD grant intersection (#11010)

2026-08-26 14:13:59 +00:00

resource-binding.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

resource-challenge.test.ts

feat(oauth-provider)!: align MCP authorization with 2026-07-28 (#10577)

2026-07-30 21:42:14 -04:00

resource-challenge.ts

feat(oauth-provider)!: align MCP authorization with 2026-07-28 (#10577)

2026-07-30 21:42:14 -04:00

resource-discovery.test.ts

feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings (#10703)

2026-08-06 05:32:06 +00:00

resources-e2e.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

resources.test.ts

feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings (#10703)

2026-08-06 05:32:06 +00:00

resources.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

revoke.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

revoke.ts

chore: sync main to next

2026-06-15 18:30:49 -07:00

schema.test.ts

feat(oauth-provider)!: align MCP authorization with 2026-07-28 (#10577)

2026-07-30 21:42:14 -04:00

schema.ts

feat(oauth-provider)!: align MCP authorization with 2026-07-28 (#10577)

2026-07-30 21:42:14 -04:00

signed-query.test.ts

fix(oauth-provider): canonicalize signed OAuth query params (#9941)

2026-06-12 15:17:00 +00:00

signed-query.ts

fix(oauth-provider): canonicalize signed OAuth query params (#9941)

2026-06-12 15:17:00 +00:00

standard-claims.ts

feat(oauth-provider): honor requested UserInfo claims via a claim registry (#10156)

2026-06-19 18:08:35 -07:00

token.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

token.ts

fix(oauth-provider): handle voluntary and essential ACR requests (#10790)

2026-08-13 19:10:36 +00:00

userinfo.test.ts

fix(device-authorization): enforce RFC device flow requirements (#10752)

2026-08-11 18:05:25 -04:00

userinfo.ts

feat(oauth-provider): honor requested UserInfo claims via a claim registry (#10156)

2026-06-19 18:08:35 -07:00

validation-flow.test.ts

feat(oauth-provider): remove silenceWarnings config and well-known endpoint warnings (#10703)

2026-08-06 05:32:06 +00:00

version.ts

…