feature: new filter tokenExchange() based on rfc-8693 by szuecs · Pull Request #4316 · zalando/skipper

feature: new filter tokenExchange() based on rfc-8693

szuecs

committed

21b522a

fix: config test case

szuecs

committed

05d6c24

optimize: reduce allocations

szuecs

committed

992adde

fix: timeout handling

szuecs

committed

b059824

fix: rfc based error responses

szuecs

committed

4919f45

fix: secret files are provided by operator, so make them fail

szuecs

committed

8be835d

fix: why convert []byte to string to use strings.NewReader instead of bytes.NewReader without converting

szuecs

committed

1a24f50

fix: issued_token_type and token_type are required by RFC, so make these mandatory

szuecs

committed

ccddf66

fix: required headers in the response by rfc

szuecs

committed

028d3a0

fix: client to Auth Server is safer to use Basic Auth which is required to support by Auth Server, instead of form values which is only set to MAY for auth servers.

szuecs

committed

8b0d195

fix: no cache headers should be on the response..

szuecs

committed

e6d9b6b

drop test case which is not compliant with RFC but depends on the AuthServer so AuthServer would not be compliant to the RFC.

szuecs

committed

63eda04

fix: req -> response headers

szuecs

committed

e2062af

request to auth server should have Content-Type application/x-www-form-urlencoded. Tests failed because Go test was not reading the for value if the content-type is not correctly set. https://datat…

szuecs

committed

d714bf3

revert the failing fast change, which fails test and should be changed as a separate PR.

szuecs

committed

d82eb36

Navigation Menu

Repository navigation

feature: new filter tokenExchange() based on rfc-8693 - #4316

feature: new filter tokenExchange() based on rfc-8693#4316
szuecs merged 15 commits into
masterfrom
feature/token-exchange-rfc-8693

Commits on Oct 5, 2026

feature: new filter tokenExchange() based on rfc-8693

fix: config test case

optimize: reduce allocations

fix: timeout handling

fix: rfc based error responses

fix: secret files are provided by operator, so make them fail

fix: why convert []byte to string to use strings.NewReader instead of bytes.NewReader without converting

fix: issued_token_type and token_type are required by RFC, so make these mandatory

fix: required headers in the response by rfc

fix: client to Auth Server is safer to use Basic Auth which is required to support by Auth Server, instead of form values which is only set to MAY for auth servers.

fix: no cache headers should be on the response..

drop test case which is not compliant with RFC but depends on the AuthServer so AuthServer would not be compliant to the RFC.

fix: req -> response headers

request to auth server should have Content-Type application/x-www-form-urlencoded. Tests failed because Go test was not reading the for value if the content-type is not correctly set. https://datat…

revert the failing fast change, which fails test and should be changed as a separate PR.