feat(authorization): hierarchical PDP, start-login helper, and PATs - #103

Draft

seonghobae wants to merge 23 commits into

mainfrom

cursor/authorization-plane-8585

Commits on Aug 18, 2026

feat(authorization): add hierarchical PDP, start-login, and PATs

cursoragent
and
seonghobae
committed
aabe3dc
test(authorization): close remaining PDP and PAT coverage branches

cursoragent
and
seonghobae
committed
363b26c
build(deps): resync uv.lock to pyproject coverage and setuptools pins

cursoragent
and
seonghobae
committed
44fb434

Commits on Aug 20, 2026

Commits on Aug 21, 2026

fix(tokens): validate rotation before revocation
seonghobae
committed
ec8a1a5
fix(authorization): isolate runtime and tenant boundaries
seonghobae
committed
1f8c8ac
fix(tokens): reject rotation of inactive credentials
seonghobae
committed
5514a24
docs(tokens): document inactive rotation policy
seonghobae
committed
9274d31
fix(authorization): close tenant and runtime auth gaps
seonghobae
committed
e765f48
fix(authorization): report menu inheritance accurately
seonghobae
committed
c2af5c5
fix(authorization): expose tenant-scoped grant management
seonghobae
committed
86e87b2
fix: make token rotation storage atomic
seonghobae
committed
1af77b0
fix: make token rotation compensation atomic
seonghobae
committed
77b8f4e

Commits on Sep 1, 2026

docs: make Keyverse README product-first
seonghobae
committed
fdb7270
test: close issuer and runtime credential gaps
seonghobae
committed
8f7ae8a
docs: separate runtime auth from PAT verification
seonghobae
committed
e9dba87
docs: make runtime authentication example executable
seonghobae
committed
5c65344
docs: correct authorization test evidence path
seonghobae
committed
4dcf6ec
docs: make PAT rotation recovery match runtime behavior
seonghobae
committed
deff4a5
fix(config): reject noncanonical public issuer URLs
seonghobae
committed
9bb7172
docs: add Ask DeepWiki badge
seonghobae
committed
57f1cd7
docs: fold public Pages landing into authorization lane
seonghobae
committed
5ac3325