Gustavo Valverde 36a6c2ea03 fix(oauth-provider): approve pending clients with serial ids and Prisma on MongoDB ...

The approval guard filtered userId on null, which serial ids turn into 0,
so every approval returned 409. Pending clients come only from anonymous
registration and never have a userId, so the guard now checks referenceId
alone. Pending clients also store referenceId as null, because Prisma on
MongoDB does not match unset fields with a null filter.

A pending private_key_jwt client can rotate its inline keys again: the
pending check in client assertion verification only guarded key rotation,
and token endpoints already refuse pending clients.

2026-10-15 16:19:09 +01:00

..

_generated/docs/v1-6

docs: add versioned documentation (#11041)

2026-08-29 07:10:36 +09:00

blogs

docs: explain the 1.7 account schema transition (#11196)

2026-09-09 10:08:03 +00:00

changelogs

…

docs

fix(oauth-provider): approve pending clients with serial ids and Prisma on MongoDB

2026-10-15 16:19:09 +01:00