fix: verify production OIDC identities cryptographically - #459

Closed

seonghobae wants to merge 13 commits into

fix/oidc-production-verification-20260809

Commits on Aug 9, 2026

fix(oidc): verify production identities against provider JWKS
seonghobae
committed
3cfb253
test(oidc): reject unsigned, tampered, replayed, and misbound identities
seonghobae
committed
c939e7c
test(coverage): include OIDC production verification
seonghobae
committed
c0bf7a4
docs(oidc): define signature, nonce, PKCE, and claim verification
seonghobae
committed
4e63462
test(api): reject unverified OIDC identities at the route boundary
seonghobae
committed
f3d13f5
test(api): include verified OIDC callback regression
seonghobae
committed
ba67318
test(oidc): make the route integration patch independently reviewable
seonghobae
committed
2cf151a
ci(oidc): patch and verify the production relying-party boundary once
seonghobae
committed
b4817ea

Commits on Aug 11, 2026

Commits on Aug 14, 2026

chore: reconcile OIDC verification with current develop
seonghobae
committed
a5a0f3c