feat: add M2M auth flow to `stitch-client` and ensure appropriate API handling by mbarlow12 · Pull Request #86 · RMI/stitch

mbarlow12 · 2026-05-08T19:53:30Z

Note

Merge #80 before this PR.

Adds a minimal auth token flow to the stitch-client package. Package users/consumers (seed, entity_linkage, llm) can be given credentials for client_id (Auth0 "Application") and client_secret, allowing them to make a call to the RMI Auth0 tenant. Posting to /oauth/token will return the access_token that can be used to make authenticated calls to our API.

stitch-api treats all callers as "users" without distinguishing between a machine/service and a human user
stitch-client can still be used with user pass-through credentials so a service like entity_linkage can operate on a user's behalf

github-actions · 2026-05-08T19:58:04Z

CD summary `3845bb7`

Frontend: https://witty-mushroom-017a3dc1e-86.westus2.1.azurestaticapps.net

Warnings

seed: Seed ran without auth

Deployments (4)

service	url	fqdn
api	open	`pr86-api.purplegrass-c07d0a94.westus2.azurecontainerapps.io`
entity-linkage	open	`pr86-entity-linkage.purplegrass-c07d0a94.westus2.azurecontainerapps.io`
frontend	https://witty-mushroom-017a3dc1e-86.westus2.1.azurestaticapps.net
stitch-llm	open	`pr86-stitch-llm.purplegrass-c07d0a94.westus2.azurecontainerapps.io`

Database (1)

db_name	postgres_host	postgres_port	postgres_db
pr_86	`stitch-dev.postgres.database.azure.com`	`5432`	`pr_86`

Jobs (2)

job	image	postgres_db	api_url
db-init	`ghcr.io/rmi/stitch-api:pr86@sha256:37bc8800f2820831c95f0e39d0671a235e26464d26d733cc9b10a67c37dfa70d`	`pr_86`
seed	`ghcr.io/rmi/stitch-seed:pr86@sha256:b2f0bcf7cb2b5e324cc21c1ddfe32c2a78ff739108102653543a233aa1713d6a`		`https://pr86-api.purplegrass-c07d0a94.westus2.azurecontainerapps.io/api/v1`

Images (4)

build_time	commit_time	git_sha	image	image_digest
2026-05-08T19:53:43Z	2026-05-08T19:53:30Z	`4d77bb1`	`ghcr.io/rmi/stitch-api:pr86`	`ghcr.io/rmi/stitch-api:pr86@sha256:37bc8800f2820831c95f0e39d0671a235e26464d26d733cc9b10a67c37dfa70d`
2026-05-08T19:53:50Z	2026-05-08T19:53:30Z	`4d77bb1`	`ghcr.io/rmi/stitch-entity-linkage:pr86`	`ghcr.io/rmi/stitch-entity-linkage:pr86@sha256:ef1198a26a23140c09a707584345a68109e6ae34e38bcff75b43fd1e27d65dab`
2026-05-08T19:53:49Z	2026-05-08T19:53:30Z	`4d77bb1`	`ghcr.io/rmi/stitch-seed:pr86`	`ghcr.io/rmi/stitch-seed:pr86@sha256:b2f0bcf7cb2b5e324cc21c1ddfe32c2a78ff739108102653543a233aa1713d6a`
2026-05-08T19:53:45Z	2026-05-08T19:53:30Z	`4d77bb1`	`ghcr.io/rmi/stitch-stitch-llm:pr86`	`ghcr.io/rmi/stitch-stitch-llm:pr86@sha256:18dfb9fbf65124212eb2483bc8632af6f3894cc820b1357cd79ec49a4643c26b`

github-actions · 2026-05-14T18:38:14Z

CD summary `031df52`

Frontend: https://witty-mushroom-017a3dc1e-86.westus2.1.azurestaticapps.net

Deployments (4)

service	url	fqdn
api	open	`pr86-api.purplegrass-c07d0a94.westus2.azurecontainerapps.io`
entity-linkage	open	`pr86-entity-linkage.purplegrass-c07d0a94.westus2.azurecontainerapps.io`
frontend	https://witty-mushroom-017a3dc1e-86.westus2.1.azurestaticapps.net
stitch-llm	open	`pr86-stitch-llm.purplegrass-c07d0a94.westus2.azurecontainerapps.io`

Database (1)

db_name	postgres_host	postgres_port	postgres_db
pr_86	`stitch-dev.postgres.database.azure.com`	`5432`	`pr_86`

Jobs (1)

job	image	postgres_db
db-init	`ghcr.io/rmi/stitch-api:pr86@sha256:bce9f64a8f6e8e2707b0ad6ceab794c5a66b343f733962b6f16cc90c8084075a`	`pr_86`

Images (4)

build_time	commit_time	git_sha	image	image_digest
2026-05-14T18:34:25Z	2026-05-14T18:34:07Z	`239087c`	`ghcr.io/rmi/stitch-api:pr86`	`ghcr.io/rmi/stitch-api:pr86@sha256:bce9f64a8f6e8e2707b0ad6ceab794c5a66b343f733962b6f16cc90c8084075a`
2026-05-14T18:34:20Z	2026-05-14T18:34:07Z	`239087c`	`ghcr.io/rmi/stitch-entity-linkage:pr86`	`ghcr.io/rmi/stitch-entity-linkage:pr86@sha256:1e945635500a9c10ff88809247c773ee28ce4db18d238e1a226906c45d5e7e8c`
2026-05-14T18:34:25Z	2026-05-14T18:34:07Z	`239087c`	`ghcr.io/rmi/stitch-seed:pr86`	`ghcr.io/rmi/stitch-seed:pr86@sha256:f5ff39386adac2a4cd4d1ea179f050b76dfa50e2b4924c105f76227bf63e7c1a`
2026-05-14T18:34:32Z	2026-05-14T18:34:07Z	`239087c`	`ghcr.io/rmi/stitch-stitch-llm:pr86`	`ghcr.io/rmi/stitch-stitch-llm:pr86@sha256:00bc3ccb292a976a843e91ddb1ea544cfcf9e1e26d39bfd094c627d4f177a219`

github-actions · 2026-05-14T18:39:42Z

CD summary `d5eb425`

Frontend: https://witty-mushroom-017a3dc1e-86.westus2.1.azurestaticapps.net

Deployments (4)

service	url	fqdn
api	open	`pr86-api.purplegrass-c07d0a94.westus2.azurecontainerapps.io`
entity-linkage	open	`pr86-entity-linkage.purplegrass-c07d0a94.westus2.azurecontainerapps.io`
frontend	https://witty-mushroom-017a3dc1e-86.westus2.1.azurestaticapps.net
stitch-llm	open	`pr86-stitch-llm.purplegrass-c07d0a94.westus2.azurecontainerapps.io`

Database (1)

db_name	postgres_host	postgres_port	postgres_db
pr_86	`stitch-dev.postgres.database.azure.com`	`5432`	`pr_86`

Jobs (1)

job	image	postgres_db
db-init	`ghcr.io/rmi/stitch-api:pr86@sha256:e648e2f091a04a31cb74a05df12b6f4a2ad8c720b5fb6a4645eaaf7077a2374d`	`pr_86`

Images (4)

build_time	commit_time	git_sha	image	image_digest
2026-05-14T18:35:22Z	2026-05-14T18:34:56Z	`1f15acb`	`ghcr.io/rmi/stitch-api:pr86`	`ghcr.io/rmi/stitch-api:pr86@sha256:e648e2f091a04a31cb74a05df12b6f4a2ad8c720b5fb6a4645eaaf7077a2374d`
2026-05-14T18:35:23Z	2026-05-14T18:34:56Z	`1f15acb`	`ghcr.io/rmi/stitch-entity-linkage:pr86`	`ghcr.io/rmi/stitch-entity-linkage:pr86@sha256:231f68c0e280d78e0e65486da19f1e65bb39441f2ca7d2a0db316eea54647714`
2026-05-14T18:35:19Z	2026-05-14T18:34:56Z	`1f15acb`	`ghcr.io/rmi/stitch-seed:pr86`	`ghcr.io/rmi/stitch-seed:pr86@sha256:2febcf3d709213b939d73e961145d7b92c26eb7cee1f50b6d772bdd49ff94f7b`
2026-05-14T18:35:20Z	2026-05-14T18:34:56Z	`1f15acb`	`ghcr.io/rmi/stitch-stitch-llm:pr86`	`ghcr.io/rmi/stitch-stitch-llm:pr86@sha256:03179ef3c1bd9593232a4b30b11e12c91cd335b5012897561dbc8a6660b3b4fa`

github-actions · 2026-05-15T14:42:02Z

CD summary `8257872`

Frontend: https://witty-mushroom-017a3dc1e-86.westus2.1.azurestaticapps.net

Deployments (4)

service	url	fqdn
api	open	`pr86-api.purplegrass-c07d0a94.westus2.azurecontainerapps.io`
entity-linkage	open	`pr86-entity-linkage.purplegrass-c07d0a94.westus2.azurecontainerapps.io`
frontend	https://witty-mushroom-017a3dc1e-86.westus2.1.azurestaticapps.net
stitch-llm	open	`pr86-stitch-llm.purplegrass-c07d0a94.westus2.azurecontainerapps.io`

Database (1)

db_name	postgres_host	postgres_port	postgres_db
pr_86	`stitch-dev.postgres.database.azure.com`	`5432`	`pr_86`

Jobs (1)

job	image	postgres_db
db-init	`ghcr.io/rmi/stitch-api:pr86@sha256:be3395b8db7aeb4c3e745c12ca57a025b9f1e463ed435ec97dbca88ee5659c3a`	`pr_86`

Images (4)

build_time	commit_time	git_sha	image	image_digest
2026-05-15T14:38:11Z	2026-05-15T14:37:59Z	`6e82d7f`	`ghcr.io/rmi/stitch-api:pr86`	`ghcr.io/rmi/stitch-api:pr86@sha256:be3395b8db7aeb4c3e745c12ca57a025b9f1e463ed435ec97dbca88ee5659c3a`
2026-05-15T14:38:13Z	2026-05-15T14:37:59Z	`6e82d7f`	`ghcr.io/rmi/stitch-entity-linkage:pr86`	`ghcr.io/rmi/stitch-entity-linkage:pr86@sha256:c0a224d3858d4a1d113ddbc2e2c849cd73bd4fbe186ab7bf5de5dc1b8feb9551`
2026-05-15T14:38:15Z	2026-05-15T14:37:59Z	`6e82d7f`	`ghcr.io/rmi/stitch-seed:pr86`	`ghcr.io/rmi/stitch-seed:pr86@sha256:b1ed2545e8f0b79a32f1b880beb3e9d05a6b219031d510bf5d985be0b681771b`
2026-05-15T14:38:10Z	2026-05-15T14:37:59Z	`6e82d7f`	`ghcr.io/rmi/stitch-stitch-llm:pr86`	`ghcr.io/rmi/stitch-stitch-llm:pr86@sha256:c77b5df4b6e394383e52bb13e8b84254c84d166193a31129f373cf9b6e94663a`

jdhoffa · 2026-06-12T11:17:41Z

@mbarlow12 is this ready for review? @AlexAxthelm dyou wanna give it a go at reviewing so we can merge if appropriate.

mbarlow12 · 2026-06-12T12:39:27Z

@jdhoffa I'll go over it when I sit down today.

github-actions · 2026-06-18T13:57:44Z

CD summary `2565bfe`

Database (1)

db_name	postgres_host	postgres_port	postgres_db
pr_86	`stitch-dev.postgres.database.azure.com`	`5432`	`pr_86`

Images (4)

build_time	commit_time	git_sha	image	image_digest
2026-06-18T13:56:18Z	2026-06-18T13:55:58Z	`35241af`	`ghcr.io/rmi/stitch-api:pr-86`	`ghcr.io/rmi/stitch-api:pr-86@sha256:927b18f2bdaa7b132d66ebecb8d05fad704aaff76167d91917067df4ae63e7b8`
2026-06-18T13:56:16Z	2026-06-18T13:55:58Z	`35241af`	`ghcr.io/rmi/stitch-entity-linkage:pr-86`	`ghcr.io/rmi/stitch-entity-linkage:pr-86@sha256:6ba4e6cc03ba1e0852e75cabf64cb192badf5ef264935775793f00e11ed098ec`
2026-06-18T13:56:16Z	2026-06-18T13:55:58Z	`35241af`	`ghcr.io/rmi/stitch-seed:pr-86`	`ghcr.io/rmi/stitch-seed:pr-86@sha256:c519df96c7d2b2d2324694ed7f80a897cef9a459f772f5dc6346ba2ab1486de1`
2026-06-18T13:56:16Z	2026-06-18T13:55:58Z	`35241af`	`ghcr.io/rmi/stitch-stitch-llm:pr-86`	`ghcr.io/rmi/stitch-stitch-llm:pr-86@sha256:4e78c4e079ff453fd656eb6ce21e875de4e8a68a3bd03eca29a63280dcd2fa57`

AlexAxthelm · 2026-06-18T14:36:13Z

@mbarlow12 I merged in main, and then closed and re-opened the PR to reset the DB now that Alembic is in.

github-actions · 2026-07-02T02:04:07Z

CD summary `6a41e2d`

Database (1)

db_name	postgres_host	postgres_port	postgres_db
pr_86	`stitch-dev.postgres.database.azure.com`	`5432`	`pr_86`

Images (4)

build_time	commit_time	git_sha	image	image_digest
2026-07-02T02:03:11Z	2026-07-02T02:02:55Z	`32a979d`	`ghcr.io/rmi/stitch-api:pr-86`	`ghcr.io/rmi/stitch-api:pr-86@sha256:6c2ff7b7edc8e127c983f113a0f21be87371ae367797b1ea65da4ade9753c362`
2026-07-02T02:03:12Z	2026-07-02T02:02:55Z	`32a979d`	`ghcr.io/rmi/stitch-entity-linkage:pr-86`	`ghcr.io/rmi/stitch-entity-linkage:pr-86@sha256:f950b9a4955d6d7eab73e6ea4d2f389c7982c261fcc79c801acabac97eb9088e`
2026-07-02T02:03:10Z	2026-07-02T02:02:55Z	`32a979d`	`ghcr.io/rmi/stitch-seed:pr-86`	`ghcr.io/rmi/stitch-seed:pr-86@sha256:3897f75e6bcbfd5aeb326dc2d321619b417a79d5115736d3913443ca9374ee1f`
2026-07-02T02:03:10Z	2026-07-02T02:02:55Z	`32a979d`	`ghcr.io/rmi/stitch-stitch-llm:pr-86`	`ghcr.io/rmi/stitch-stitch-llm:pr-86@sha256:4382ea411f1ffa087f43eefad85464c5e5354d3153f0ba818d7e730da070b8c7`

github-actions · 2026-07-22T23:14:38Z

CD summary `906c6e1`

Database (1)

db_name	postgres_host	postgres_port	postgres_db
pr_86	`stitch-dev.postgres.database.azure.com`	`5432`	`pr_86`

Images (4)

build_time	commit_time	git_sha	image	image_digest
2026-07-22T23:13:43Z	2026-07-22T23:13:29Z	`e697338`	`ghcr.io/rmi/stitch-api:pr-86`	`ghcr.io/rmi/stitch-api:pr-86@sha256:5b2e11276babe4d6a76f04b844e3db795e7dcb2c610ec854d85655e389560fc6`
2026-07-22T23:13:45Z	2026-07-22T23:13:29Z	`e697338`	`ghcr.io/rmi/stitch-entity-linkage:pr-86`	`ghcr.io/rmi/stitch-entity-linkage:pr-86@sha256:f5f90b6ed3342a2856e3ffd4f4fea42e0ce6450b104ccb9e05142ea939d53e38`
2026-07-22T23:13:47Z	2026-07-22T23:13:29Z	`e697338`	`ghcr.io/rmi/stitch-seed:pr-86`	`ghcr.io/rmi/stitch-seed:pr-86@sha256:fee0ba39c678d4567401b275f34962c1f5cdb25a67cea1c7c0b943659cd48213`
2026-07-22T23:13:44Z	2026-07-22T23:13:29Z	`e697338`	`ghcr.io/rmi/stitch-stitch-llm:pr-86`	`ghcr.io/rmi/stitch-stitch-llm:pr-86@sha256:8b5b7b91c71fabad54cf5f6b18d8002df41185e53ccf64db0057b4c0e702e593`

github-actions · 2026-07-23T08:27:08Z

CD summary `906c6e1`

Frontend: https://witty-mushroom-017a3dc1e-86.westus2.1.azurestaticapps.net

Deployments (4)

service	url	fqdn
api	open	`pr-86-api.purplegrass-c07d0a94.westus2.azurecontainerapps.io`
entity-linkage	open	`pr-86-entity-linkage.purplegrass-c07d0a94.westus2.azurecontainerapps.io`
frontend	https://witty-mushroom-017a3dc1e-86.westus2.1.azurestaticapps.net
stitch-llm	open	`pr-86-stitch-llm.purplegrass-c07d0a94.westus2.azurecontainerapps.io`

Database (1)

db_name	postgres_host	postgres_port	postgres_db
pr_86	`stitch-dev.postgres.database.azure.com`	`5432`	`pr_86`

Jobs (2)

job	image	postgres_db	api_url	auth_mode
db-migrations	`ghcr.io/rmi/stitch-api:pr-86@sha256:f6724ac627b27eb2dea04fac0e8662481ad6b0567ecf14496fe39c171a406c1b`	`pr_86`
seed	`ghcr.io/rmi/stitch-seed:pr-86@sha256:6934eba4d3b3b8ff17ca69244fba8bb07dd495c0feaccc220bf58b4c2bc79369`		`https://pr-86-api.purplegrass-c07d0a94.westus2.azurecontainerapps.io/api/v1`	`m2m`

Images (4)

build_time	commit_time	git_sha	image	image_digest
2026-07-23T08:23:02Z	2026-07-23T08:22:05Z	`f76b897`	`ghcr.io/rmi/stitch-api:pr-86`	`ghcr.io/rmi/stitch-api:pr-86@sha256:f6724ac627b27eb2dea04fac0e8662481ad6b0567ecf14496fe39c171a406c1b`
2026-07-23T08:23:06Z	2026-07-23T08:22:05Z	`f76b897`	`ghcr.io/rmi/stitch-entity-linkage:pr-86`	`ghcr.io/rmi/stitch-entity-linkage:pr-86@sha256:e63c2ecbd2ff4ca08ab8c7b1598e3ab0cf9ab8cd2708138b0f2a243a55a0a396`
2026-07-23T08:23:04Z	2026-07-23T08:22:05Z	`f76b897`	`ghcr.io/rmi/stitch-seed:pr-86`	`ghcr.io/rmi/stitch-seed:pr-86@sha256:6934eba4d3b3b8ff17ca69244fba8bb07dd495c0feaccc220bf58b4c2bc79369`
2026-07-23T08:23:01Z	2026-07-23T08:22:05Z	`f76b897`	`ghcr.io/rmi/stitch-stitch-llm:pr-86`	`ghcr.io/rmi/stitch-stitch-llm:pr-86@sha256:848c3039b00ef314f326ba7e3c72ff82373e6ab92b24eb7c99dfe4f86cda3804`

AlexAxthelm · 2026-07-23T09:06:28Z

@mbarlow12 There was migration issue (i'm guessing that this environment got initialized on an old baseline), so I rebooted the DB (close and reopened PR)

mbarlow12 · 2026-07-23T13:28:07Z

All good. Was just trying to push this forward to get it out of the backlog...it's become more involved/larger than anticipated 🙄

mbarlow12 added 3 commits May 8, 2026 13:17

feat(stitch-client): add Auth0 M2M client-credentials auth flow

a09bebd

Merge branch 'feat/auth-drop-name-email-req' into feat/add-m2m-to-client

0a0c89b

test(auth): cover Auth0 M2M token shape in validator and JIT path

3845bb7

mbarlow12 added 2 commits May 14, 2026 12:33

Merge branch 'main' into feat/add-m2m-to-client

031df52

remove disallowed ignore comment

d5eb425

Merge branch 'main' into feat/add-m2m-to-client

8257872

mbarlow12 marked this pull request as ready for review May 15, 2026 15:06

Merge branch 'main' into feat/add-m2m-to-client

2565bfe

AlexAxthelm temporarily deployed to development June 18, 2026 13:56 — with GitHub Actions Inactive

AlexAxthelm had a problem deploying to development June 18, 2026 13:57 — with GitHub Actions Failure

AlexAxthelm closed this Jun 18, 2026

AlexAxthelm temporarily deployed to development June 18, 2026 14:34 — with GitHub Actions Inactive

AlexAxthelm reopened this Jun 18, 2026

AlexAxthelm temporarily deployed to development June 18, 2026 14:35 — with GitHub Actions Inactive

mbarlow12 temporarily deployed to development July 2, 2026 02:03 — with GitHub Actions Inactive

mbarlow12 had a problem deploying to development July 2, 2026 02:03 — with GitHub Actions Failure

mbarlow12 added 3 commits July 21, 2026 10:40

merge main

9d2e97c

remove bearer token and integrate M2M with services

5e90118

Merge branch 'main' into feat/add-m2m-to-client

906c6e1

mbarlow12 temporarily deployed to development July 22, 2026 23:13 — with GitHub Actions Inactive

mbarlow12 had a problem deploying to development July 22, 2026 23:14 — with GitHub Actions Failure

AlexAxthelm closed this Jul 23, 2026

AlexAxthelm temporarily deployed to development July 23, 2026 08:21 — with GitHub Actions Inactive

AlexAxthelm reopened this Jul 23, 2026

AlexAxthelm temporarily deployed to development July 23, 2026 08:22 — with GitHub Actions Inactive

AlexAxthelm temporarily deployed to development July 23, 2026 08:23 — with GitHub Actions Inactive

AlexAxthelm temporarily deployed to development July 23, 2026 08:24 — with GitHub Actions Inactive

AlexAxthelm temporarily deployed to development July 23, 2026 08:26 — with GitHub Actions Inactive

Navigation Menu

Uh oh!

feat: add M2M auth flow to `stitch-client` and ensure appropriate API handling - #86

feat: add M2M auth flow to `stitch-client` and ensure appropriate API handling#86
mbarlow12 wants to merge 11 commits into
mainfrom
feat/add-m2m-to-client

mbarlow12 commented May 8, 2026

Uh oh!

github-actions Bot commented May 8, 2026

Uh oh!

github-actions Bot commented May 14, 2026

Uh oh!

github-actions Bot commented May 14, 2026

Uh oh!

github-actions Bot commented May 15, 2026

Uh oh!

jdhoffa commented Jun 12, 2026

Uh oh!

mbarlow12 commented Jun 12, 2026

Uh oh!

github-actions Bot commented Jun 18, 2026

Uh oh!

AlexAxthelm commented Jun 18, 2026

Uh oh!

github-actions Bot commented Jul 2, 2026

Uh oh!

github-actions Bot commented Jul 22, 2026

Uh oh!

github-actions Bot commented Jul 23, 2026

Uh oh!

AlexAxthelm commented Jul 23, 2026

Uh oh!

mbarlow12 commented Jul 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

mbarlow12 commented May 8, 2026

Uh oh!

github-actions Bot commented May 8, 2026

CD summary 3845bb7

Warnings

Uh oh!

github-actions Bot commented May 14, 2026

CD summary 031df52

Uh oh!

github-actions Bot commented May 14, 2026

CD summary d5eb425

Uh oh!

github-actions Bot commented May 15, 2026

CD summary 8257872

Uh oh!

jdhoffa commented Jun 12, 2026

Uh oh!

mbarlow12 commented Jun 12, 2026

Uh oh!

github-actions Bot commented Jun 18, 2026

CD summary 2565bfe

Uh oh!

AlexAxthelm commented Jun 18, 2026

Uh oh!

github-actions Bot commented Jul 2, 2026

CD summary 6a41e2d

Uh oh!

github-actions Bot commented Jul 22, 2026

CD summary 906c6e1

Uh oh!

github-actions Bot commented Jul 23, 2026

CD summary 906c6e1

Uh oh!

AlexAxthelm commented Jul 23, 2026

Uh oh!

mbarlow12 commented Jul 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

CD summary `3845bb7`

CD summary `031df52`

CD summary `d5eb425`

CD summary `8257872`

CD summary `2565bfe`

CD summary `6a41e2d`

CD summary `906c6e1`

CD summary `906c6e1`