feat: add positive tests for the Authorization Code Grant (supersedes #267)#364

Merged

pcarleton merged 11 commits into

mainfrom

paulc/pr267-superseding

Jun 24, 2026

Commits on Jun 24, 2026

feat: add positive tests for the Authorization Code Grant

Michito-Okai
authored and
pcarleton
committed
fix(auth): use import type for AuthorizationServerOptions in types.ts
pcarleton
committed
fix(auth): make client-id/client-secret optional; rename --secret→--client-secret
pcarleton
committed
fix(auth): generate PKCE verifier per-run; derive S256 challenge
pcarleton
committed
fix(auth): build authorization URL with URLSearchParams; drop hardcoded resource
pcarleton
committed
fix(auth): default token_endpoint_auth_methods_supported to client_secret_basic; add 'none' branch
pcarleton
committed
fix(auth): check auth-method support before starting callback server
pcarleton
committed
fix(auth): check error param first; treat state mismatch as fatal; drop fabricated code_challenge assertion
pcarleton
committed
fix(auth): redact tokens from check details
pcarleton
committed
fix(auth): harden callback server (path-scoped, close(), error handler, clear timeout)
pcarleton
committed
feat(auth): print redirect URI and timeout hint before browser prompt
pcarleton
committed