You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@reqsign.apache.org by "Xuanwo (via GitHub)" <gi...@apache.org> on 2026/10/02 17:28:19 UTC
[PR] feat(google): support trusted custom OAuth token endpoints [reqsign]
Xuanwo opened a new pull request, #900:
URL: https://github.com/apache/reqsign/pull/900
Closes #897.
Allow trusted custom OAuth endpoints through `with_token_uri` on the service-account token and now-public authorized-user providers. The service-account request and JWT audience use the same selected URI; both flows retain the canonical default and compose with existing credential granters.
Adapters can deserialize a trusted credential file alongside its `token_uri` and pass their selection explicitly, preferring configured URI, then file URI, then the default. Existing credential structs and file/default providers keep their behavior, avoiding a source-breaking field addition or implicitly trusting a previously ignored endpoint. The README demonstrates this adapter path.
Reject malformed endpoint configuration before exchange and redact endpoint values, transport errors, and OAuth response payloads. Endpoint trust and transport redirect/TLS policy remain caller responsibilities. Deterministic public-API tests cover both flows, URI/audience consistency, adapter precedence, repeated exchanges, failure redaction without fallback, and CAB composition. Local live-cloud tests were not enabled.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@reqsign.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@reqsign.apache.org
For additional commands, e-mail: commits-help@reqsign.apache.org
Re: [PR] feat(google): support trusted custom OAuth token endpoints [reqsign]
Posted by "Xuanwo (via GitHub)" <gi...@apache.org>.
Xuanwo merged PR #900:
URL: https://github.com/apache/reqsign/pull/900
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@reqsign.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@reqsign.apache.org
For additional commands, e-mail: commits-help@reqsign.apache.org