Admin Botandpoimen c9ded315bc feat(proxy): add /auth/exchange token exchange endpoint ...

POST /auth/exchange: service presents user JWT + own credentials,
gets scoped service token with subject identity metadata.

Flow: validate subject token, authenticate service via
client_credentials, verify scope subset, return token + metadata.
Scope escalation denied if requested scope exceeds service roles.

14 tests covering: helpers, validation, missing fields, scope
subset, JWT decoding, edge cases.

Closes homelab#10

Co-authored-by: poimen <[email protected]>

2026-09-08 17:05:13 -07:00

..

auth_endpoints_test.go

feat(proxy): add /auth/token and /auth/refresh endpoints (#18)

2026-09-09 00:00:07 +00:00

auth_endpoints.go

feat(proxy): add /auth/token and /auth/refresh endpoints (#18)

2026-09-09 00:00:07 +00:00

bodydispatch_test.go

fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN

2026-08-21 20:46:45 -07:00

bodysize_test.go

fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN

2026-08-21 20:46:45 -07:00

embeddings_and_rerank_test.go

fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN

2026-08-21 20:46:45 -07:00

headers_test.go

fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN

2026-08-21 20:46:45 -07:00

models_endpoint_test.go

fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN

2026-08-21 20:46:45 -07:00

proxy_test.go

fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN

2026-08-21 20:46:45 -07:00

proxy.go

feat(proxy): add /auth/exchange token exchange endpoint

2026-09-08 17:05:13 -07:00

router.go

fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN

2026-08-21 20:46:45 -07:00

streaming_test.go

feat: phase 8 serviceadapter crd rollout (32/33 tasks)

2026-08-26 13:47:36 -07:00

timeout_test.go

fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN

2026-08-21 20:46:45 -07:00

token_exchange_test.go

feat(proxy): add /auth/exchange token exchange endpoint

2026-09-08 17:05:13 -07:00

token_exchange.go

feat(proxy): add /auth/exchange token exchange endpoint

2026-09-08 17:05:13 -07:00

toolcall_test.go

fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN

2026-08-21 20:46:45 -07:00

unknown_model_test.go

fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN

2026-08-21 20:46:45 -07:00

workflows_test.go

feat(phase3): Complete Temporal REST API Gateway with gRPC integration

2026-08-22 23:17:12 -07:00

workflows.go

feat(phase3): Complete Temporal REST API Gateway with gRPC integration

2026-08-22 23:17:12 -07:00