Repository navigation

fix(server)!: confine resource-less requests to AllowedResources; resources at consent - #699

Merged

osanderson merged 5 commits into

mainfrom

fix/resource-chain-review

Oct 25, 2026

Merged

fix(server)!: confine resource-less requests to AllowedResources; resources at consent#699
osanderson merged 5 commits into
mainfrom
fix/resource-chain-review

Commits on Oct 25, 2026
- fix(server)!: confine requests naming no resource to the client's AllowedResources
  
  osanderson
  and
  claude
  committed
  b289a81
- feat(server): show and narrow resources at consent; confine federation clients' resources
  
  osanderson
  and
  claude
  committed
  593801c
- docs: describe the AllowedResources default and consent-time resources
  
  osanderson
  and
  claude
  committed
  963e484
- refactor(server): check an approved grant, CIBA hints and binding_message in helpers
  
  osanderson
  and
  claude
  committed
  f96641d
- refactor(server): check what makes a completion login_required in one helper
  
  osanderson
  and
  claude
  committed
  a8c6b61