Repository navigation

feat(authorization): hierarchical PDP, start-login helper, and PATs - #103

Draft

seonghobae wants to merge 28 commits into

mainfrom

cursor/authorization-plane-8585

Draft

feat(authorization): hierarchical PDP, start-login helper, and PATs#103
seonghobae wants to merge 28 commits into
mainfrom
cursor/authorization-plane-8585

Commits on Aug 18, 2026
- feat(authorization): add hierarchical PDP, start-login, and PATs
  
  cursoragent
  and
  seonghobae
  committed
  aabe3dc
- test(authorization): close remaining PDP and PAT coverage branches
  
  cursoragent
  and
  seonghobae
  committed
  363b26c
- build(deps): resync uv.lock to pyproject coverage and setuptools pins
  
  cursoragent
  and
  seonghobae
  committed
  44fb434
Commits on Aug 20, 2026
- fix(authorization): bind operator gate to embedded router
  seonghobae
  committed
  157b768
- fix(start-login): normalize encoded discovery markers
  seonghobae
  committed
  d540515
Commits on Aug 21, 2026
- fix(tokens): validate rotation before revocation
  seonghobae
  committed
  ec8a1a5
- fix(authorization): isolate runtime and tenant boundaries
  seonghobae
  committed
  1f8c8ac
- fix(tokens): reject rotation of inactive credentials
  seonghobae
  committed
  5514a24
- docs(tokens): document inactive rotation policy
  seonghobae
  committed
  9274d31
- fix(authorization): close tenant and runtime auth gaps
  seonghobae
  committed
  e765f48
- fix(authorization): report menu inheritance accurately
  seonghobae
  committed
  c2af5c5
- fix(authorization): expose tenant-scoped grant management
  seonghobae
  committed
  86e87b2
- fix: make token rotation storage atomic
  seonghobae
  committed
  1af77b0
- fix: make token rotation compensation atomic
  seonghobae
  committed
  77b8f4e
Commits on Sep 1, 2026
- docs: make Keyverse README product-first
  seonghobae
  committed
  fdb7270
- test: close issuer and runtime credential gaps
  seonghobae
  committed
  8f7ae8a
- docs: separate runtime auth from PAT verification
  seonghobae
  committed
  e9dba87
- docs: make runtime authentication example executable
  seonghobae
  committed
  5c65344
- docs: correct authorization test evidence path
  seonghobae
  committed
  4dcf6ec
- docs: make PAT rotation recovery match runtime behavior
  seonghobae
  committed
  deff4a5
- fix(config): reject noncanonical public issuer URLs
  seonghobae
  committed
  9bb7172
- docs: add Ask DeepWiki badge
  seonghobae
  committed
  57f1cd7
- docs: fold public Pages landing into authorization lane
  seonghobae
  committed
  5ac3325
Commits on Oct 4, 2026
- fix(authz): capture menu and SSO policies in coherent reads
  seonghobae
  committed
  1aaa1ff
- merge: reconcile PR103 with main and repair PAT security boundaries
  seonghobae
  committed
  af5b6aa
Commits on Oct 5, 2026

Navigation Menu

Repository navigation

feat(authorization): hierarchical PDP, start-login helper, and PATs - #103

feat(authorization): hierarchical PDP, start-login helper, and PATs#103
seonghobae wants to merge 28 commits into
mainfrom
cursor/authorization-plane-8585

Commits on Aug 18, 2026

feat(authorization): add hierarchical PDP, start-login, and PATs

test(authorization): close remaining PDP and PAT coverage branches

build(deps): resync uv.lock to pyproject coverage and setuptools pins

Commits on Aug 20, 2026

fix(authorization): bind operator gate to embedded router

fix(start-login): normalize encoded discovery markers

Commits on Aug 21, 2026

fix(tokens): validate rotation before revocation

fix(authorization): isolate runtime and tenant boundaries

fix(tokens): reject rotation of inactive credentials

docs(tokens): document inactive rotation policy

fix(authorization): close tenant and runtime auth gaps

fix(authorization): report menu inheritance accurately

fix(authorization): expose tenant-scoped grant management

fix: make token rotation storage atomic

fix: make token rotation compensation atomic

Commits on Sep 1, 2026

docs: make Keyverse README product-first

test: close issuer and runtime credential gaps

docs: separate runtime auth from PAT verification

docs: make runtime authentication example executable

docs: correct authorization test evidence path

docs: make PAT rotation recovery match runtime behavior

fix(config): reject noncanonical public issuer URLs

docs: add Ask DeepWiki badge

docs: fold public Pages landing into authorization lane

Commits on Oct 4, 2026

fix(authz): capture menu and SSO policies in coherent reads

merge: reconcile PR103 with main and repair PAT security boundaries

Commits on Oct 5, 2026

docs: align authorization grant keys and PAT reference evidence

fix(pat): preserve rotation audit lineage with closed reads

fix(auth): deny malformed token headers without server errors