Repository navigation

okfy-mcp over HTTP: one shared token, or identities from an OpenID issuer - #7

Closed

theaspirational wants to merge 18 commits into

vsov:mainfrom

theaspirational:pr/mcp-http-oidc

Closed

okfy-mcp over HTTP: one shared token, or identities from an OpenID issuer#7
theaspirational wants to merge 18 commits into
vsov:mainfrom
theaspirational:pr/mcp-http-oidc

Commits on Oct 15, 2026
- Retrieval: stopwords leave the query; every hit names the terms it matched
  
  theaspirational
  and
  claude
  committed
  b24da8b
- okfy-mcp: `matched` reads the core's matched_terms; okfy_show outline=true
  
  theaspirational
  and
  claude
  committed
  fd7593d
- okfy-mcp: the server introduces itself; an empty search says what to do
  
  theaspirational
  and
  claude
  committed
  6565417
- Stable page identity: bundle_uid, okf_id, okfy migrate ids
  
  theaspirational
  and
  claude
  committed
  a08d81a
- Direct-write lane: types the owner opens are written without review
  
  theaspirational
  and
  claude
  committed
  cacfa53
- Direct-write lane: what the first review found
  
  theaspirational
  and
  claude
  committed
  a8bd66d
- Direct-write lane: the packaged AGENTS.md names it
  
  theaspirational
  and
  claude
  committed
  b97ba5f
- Injection scan: join hard wraps only, not every newline of a value
  
  theaspirational
  and
  claude
  committed
  0490319
- Direct-write lane: a create of an undeclared type is refused before the lane
  
  theaspirational
  and
  claude
  committed
  959bd51
- okfy-mcp: streamable HTTP for many clients, behind one bearer token
  
  theaspirational
  and
  claude
  committed
  4167926
- okfy-mcp: identities from an OpenID issuer; the token's subject is the actor
  
  theaspirational
  and
  claude
  committed
  b176c2b
- okfy-mcp: advertise both scopes; the issuer may name the actor (okfy_actor)
  
  theaspirational
  and
  claude
  committed
  f2daa8a
- okfy-mcp: name the client on the JWKS fetch; log why a token is refused
  
  theaspirational
  and
  claude
  committed
  ca84b9f
- okfy-mcp: accept the public host behind a reverse proxy
  
  theaspirational
  and
  claude
  committed
  45f4f7d
- okfy-mcp: trust several OpenID issuers; the token's iss picks the keys
  
  theaspirational
  and
  claude
  committed
  1d6373e
- okfy-mcp: --oidc-write-group, the issuer's group outranks the client's scope
  
  theaspirational
  and
  claude
  committed
  3bb10cf
- okfy-mcp: --oidc-issuer-prefix, trust the clients an issuer registered itself
  
  theaspirational
  and
  claude
  committed
  8580841
Commits on Oct 16, 2026
- okfy-mcp: --oidc-read-group, one issuer serves several bundles, each to its own people
  
  theaspirational
  and
  claude
  committed
  53c68b2

Commits

Commits on Oct 15, 2026

Commits on Oct 16, 2026