Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
grandnode
grandnode2
Repository navigation
Code
Issues
7
(7)
Pull requests
12
(12)
Discussions
Actions
Projects
Wiki
Security and quality
Insights
More
items
OIDC resource server: scheme, configuration and Protected Resource Metadata (1/7)
- #891
#891
Merged
KrzysztofPajak
merged 17 commits into
develop
grandnode/grandnode2:develop
from
feature/oidc-resource-server
grandnode/grandnode2:feature/oidc-resource-server
Copy head branch name to clipboard
Oct 11, 2026
Conversation
Commits
17
(17)
Checks
Files changed
Merged
OIDC resource server: scheme, configuration and Protected Resource Metadata (1/7)
#891
KrzysztofPajak
merged 17 commits into
develop
grandnode/grandnode2:develop
from
feature/oidc-resource-server
grandnode/grandnode2:feature/oidc-resource-server
Copy head branch name to clipboard
Commits
Commits on Oct 11, 2026
OIDC resource server: configuration and a protected resource registry for configuration and plugins
KrzysztofPajak
committed
70833fb
View commit details
Copy full SHA for 70833fb
Browse repository at this point
OIDC resource server: canonical resource URIs, audience, authorized party and scope checks
KrzysztofPajak
committed
0f66cdd
View commit details
Copy full SHA for 0f66cdd
Browse repository at this point
OIDC resource server: RFC 6750 challenges and RFC 9728 protected resource metadata
KrzysztofPajak
committed
cfd1888
View commit details
Copy full SHA for cfd1888
Browse repository at this point
OIDC resource server: Oidc JwtBearer scheme, startup validation and metadata endpoints
KrzysztofPajak
committed
e4fe29d
View commit details
Copy full SHA for e4fe29d
Browse repository at this point
OIDC resource server: pipeline tests with an in-memory signing key
KrzysztofPajak
committed
ef88aee
View commit details
Copy full SHA for ef88aee
Browse repository at this point
OIDC resource server: store URL as audience base, fail-closed account conditions, scheme always registered
Show description for 7b1cc26
KrzysztofPajak
committed
7b1cc26
View commit details
Copy full SHA for 7b1cc26
Browse repository at this point
OIDC resource server: always write the ProblemDetails body of challenges and refusals
KrzysztofPajak
committed
6768e2b
View commit details
Copy full SHA for 6768e2b
Browse repository at this point
OIDC resource server: resolve the audience store from the request host, never the store cookie
KrzysztofPajak
committed
db6434f
View commit details
Copy full SHA for db6434f
Browse repository at this point
OIDC resource server: RFC 9728 metadata URL with the well-known segment between host and resource path
KrzysztofPajak
committed
f51fb29
View commit details
Copy full SHA for f51fb29
Browse repository at this point
OIDC resource server: 404 and a warning instead of a metadata document without a resource URI
KrzysztofPajak
committed
c611acd
View commit details
Copy full SHA for c611acd
Browse repository at this point
Skip store and work context setup on the protected resource metadata endpoints
KrzysztofPajak
committed
7f1a4a8
View commit details
Copy full SHA for 7f1a4a8
Browse repository at this point
OIDC resource server: answer 503 instead of invalid_token when the authorization server metadata cannot be obtained
KrzysztofPajak
committed
30741b7
View commit details
Copy full SHA for 30741b7
Browse repository at this point
OIDC resource server: treat a negative ClockSkewSeconds as zero instead of failing the request
KrzysztofPajak
committed
1101972
View commit details
Copy full SHA for 1101972
Browse repository at this point
OIDC resource server: build the registry's read-only resource list once
KrzysztofPajak
committed
c0d3952
View commit details
Copy full SHA for c0d3952
Browse repository at this point
OIDC resource server: leave enablement of the metadata endpoints to the startup that maps them
KrzysztofPajak
committed
ea2c20e
View commit details
Copy full SHA for ea2c20e
Browse repository at this point
OIDC resource server tests: dispose request messages and RSA instances
KrzysztofPajak
committed
5af62c3
View commit details
Copy full SHA for 5af62c3
Browse repository at this point
OIDC resource server: filter explicitly in the header escaping and resource URI validation
KrzysztofPajak
committed
e084407
View commit details
Copy full SHA for e084407
Browse repository at this point
You can’t perform that action at this time.