3 Commits

Author	SHA1	Message	Date
MsfPablo	d60bac5c79	db: reject unknown OAuth client scopes at creation (#3424) ... Unknown scopes grant nothing, so clients were silently under-privileged. Report every invalid scope at once. Fixes #3406	2026-09-25 21:24:37 +02:00
Kristoffer Dalby	84715e976c	api/v2: add OAuth client-credentials auth and scope enforcement	2026-06-26 09:18:06 +02:00
Kristoffer Dalby	ee95cf58d9	hscontrol: add the OAuth client and access-token model ... Add the OAuth client type, its database storage, the scope grant package, policy tag-ownership exposure, and the state operations backing the v2 OAuth client-credentials flow.	2026-06-26 09:18:06 +02:00