Repository navigation

OAuth: host-backed credential store, DCR-aware detection, SSRF guard, no echoed secrets - #39

Merged

senamakel merged 7 commits into

tinyhumansai:mainfrom

senamakel:host-pushdown

Oct 4, 2026

Merged

OAuth: host-backed credential store, DCR-aware detection, SSRF guard, no echoed secrets#39
senamakel merged 7 commits into
tinyhumansai:mainfrom
senamakel:host-pushdown

Commits on Oct 3, 2026
- fix(oauth): remove duplicate test files for host store
  
  senamakel
  and
  medullabot
  committed
  3ccc468
- fix(registry): handle OAuth token refresh errors gracefully
  
  senamakel
  and
  medullabot
  committed
  75687c8
- feat(oauth): add endpoint guard and sanitize token error bodies
  
  senamakel
  and
  medullabot
  committed
  dcca507
- fix(oauth): use dedicated error code for credential store failures
  
  senamakel
  and
  medullabot
  committed
  ba8dea2
Commits on Oct 4, 2026
- fix(oauth): pin guarded endpoint connections
  
  senamakel
  and
  medullabot
  committed
  8e2702f
- test(oauth): cover guarded client behavior
  
  senamakel
  and
  medullabot
  committed
  52ecae6
- test(oauth): cover guarded endpoint paths
  
  senamakel
  and
  medullabot
  committed
  672d432