feat(auth): run the OAuth dance on the backend (RUK-291) - #8

Merged

ruko1202 merged 11 commits into

mainfrom

feat/backend-oauth-dance

Sep 7, 2026

Commits on Sep 7, 2026

feat(config): add the OAuth dance keys behind an all-or-nothing gate

ruko1202
and
claude
committed
9002d40
feat(auth): add the failure reasons and sentinels the dance needs

ruko1202
and
claude
committed
f036677
feat(auth): add the Google token-exchange gateway on x/oauth2

ruko1202
and
claude
committed
98ac6b2
feat(auth): add the Valkey store behind the one-time dance code

ruko1202
and
claude
committed
a4f24af
refactor(auth): give failed logins one publisher

ruko1202
and
claude
committed
720e7a3
feat(entity): add the dance types shared across layers

ruko1202
and
claude
committed
2aaf856
feat(auth): run the OAuth dance in the auth service, with state in signed cookies

ruko1202
and
claude
committed
00daa83
fix(auth): sanitize credentials out of request logs

ruko1202
and
claude
committed
69803fa
feat(auth): expose the dance over three endpoints behind the config gate

ruko1202
and
claude
committed
6b45922
chore(auth): regenerate the OpenAPI spec and client for the dance

ruko1202
and
claude
committed
57ce413
docs(agents): rule out plumbing tests and configuration logging

ruko1202
and
claude
committed
bfd04eb