Go to issue

Labels Milestones New Issue

0 Open 9 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

area/auth

area/authentik

area/downstream

area/gateway

priority/high

priority/low

priority/medium

status/blocked

status/done

status/in-progress

status/review

status/todo

type/docs

type/feature

type/infra

Milestone

All milestones No milestones

Open milestones

Phase 3: OAuth2 Token Exchange & Identity Propagation

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

poimen rock (Rock)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 9 Closed

Open

Label

Clear labels

area/auth

area/authentik

area/downstream

area/gateway

priority/high

priority/low

priority/medium

status/blocked

status/done

status/in-progress

status/review

status/todo

type/docs

type/feature

type/infra

Milestone

No milestone

Open milestones

Phase 3: OAuth2 Token Exchange & Identity Propagation

Projects

Clear projects

Assignee

Clear assignees

No assignee

poimen

rock

P3.9: End-to-end integration test — user login through token exchange to downstream area/autharea/gatewaypriority/mediumstatus/todotype/docs

#13

by rock was closed 2026-09-08 04:45:25 +00:00

Phase 3: OAuth2 Token Exchange & Identity Propagation 0 / 4

P3.8: Audit NetworkPolicy — downstream services must only accept gateway traffic area/downstreampriority/mediumstatus/todotype/infra

#12

by rock was closed 2026-09-08 04:45:20 +00:00

Phase 3: OAuth2 Token Exchange & Identity Propagation 0 / 10

P3.7: Wire auth config (tokenUrl, clientId, clientSecret) into gateway deployment area/gatewaypriority/highstatus/todotype/infra

#11

by rock was closed 2026-09-08 04:45:17 +00:00

Phase 3: OAuth2 Token Exchange & Identity Propagation 0 / 7

P3.6: Enforce JWT auth on X-Service adapter dispatch area/autharea/gatewaypriority/mediumstatus/todotype/feature

#10

by rock was closed 2026-09-08 04:45:13 +00:00

Phase 3: OAuth2 Token Exchange & Identity Propagation 0 / 12

P3.5: Implement RFC 8693 OAuth2 Token Exchange endpoint area/autharea/authentikarea/gatewaypriority/highstatus/todotype/feature

#9

by rock was closed 2026-09-08 04:45:09 +00:00

Phase 3: OAuth2 Token Exchange & Identity Propagation 0 / 16

P3.4: Inject X-Forwarded-User identity headers after JWT validation area/autharea/gatewaypriority/highstatus/todotype/feature

#8

by rock was closed 2026-09-08 04:45:06 +00:00

Phase 3: OAuth2 Token Exchange & Identity Propagation 0 / 12

P3.3: Add /auth/refresh endpoint (token renewal) area/autharea/gatewaypriority/highstatus/todotype/feature

#7

by rock was closed 2026-09-08 04:45:02 +00:00

Phase 3: OAuth2 Token Exchange & Identity Propagation 0 / 8

P3.2: Enable password grant on local-llm Authentik provider area/authentikpriority/highstatus/todotype/infra

#6

by rock was closed 2026-09-08 04:44:59 +00:00

Phase 3: OAuth2 Token Exchange & Identity Propagation 0 / 5

P3.1: Add /auth/token endpoint (password grant proxy) area/autharea/gatewaypriority/highstatus/todotype/feature

#5

by rock was closed 2026-09-08 04:44:58 +00:00

Phase 3: OAuth2 Token Exchange & Identity Propagation 0 / 11