Search results

oauth tables hand-roll created_at instead of using Harper's @createdTime

claude-fix:bugFocused bug fix with regression testFocused bug fix with regression test

Status: Open.

#168 In HarperFast/oauth;

· heskew opened on Jul 9, 2026

MCP OAuth: Client ID Metadata Documents (CIMD) — URL client_ids with SSRF-guarded resolution

enhancementNew feature or requestNew feature or request

Status: Open.

#166 In HarperFast/oauth;

· heskew opened on Jul 8, 2026

Follow-up: jwks_uri support for private_key_jwt clients

Status: Open.

#164 In HarperFast/oauth;

· heskew opened on Jul 8, 2026

client_credentials (4/4): rate-limit token issuance (defense-in-depth)

Status: Open.

#163 In HarperFast/oauth;

· heskew opened on Jul 8, 2026

client_credentials (3/4): token-endpoint grant — resource binding, per-grant TTL, discovery

Status: Open.

#162 In HarperFast/oauth;

· heskew opened on Jul 8, 2026

client_credentials (1/4): assertion primitives — strict EdDSA JWT verify + jti replay store

Status: Open.

#160 In HarperFast/oauth;

· heskew opened on Jul 8, 2026

client_credentials (2/4): DCR registration of private_key_jwt clients (jwks, gated by initialAccessToken)

Status: Open.

#161 In HarperFast/oauth;

· heskew opened on Jul 8, 2026

Add RFC 7523 client_credentials grant (private_key_jwt, EdDSA) for headless agent auth

Status: Open.

#159 In HarperFast/oauth;

· tps-flint opened on Jul 8, 2026

MCP OAuth v1.1: remaining 2026-07-28 spec forward-work (SEP-2350 scope step-up, CIMD)

enhancementNew feature or requestNew feature or request

Status: Open.

#156 In HarperFast/oauth;

· heskew opened on Jul 2, 2026

MCP OAuth: optional additional signing algorithms (ES256 no-dep; EdDSA on demand)

Status: Open.

#127 In HarperFast/oauth;

· heskew opened on Jun 19, 2026