| /adr/0001-broker-confidential-web-clients.md |
0.85 |
ADR 0001 — Broker confidential web-client registry |
adr, decision, broker, oauth, confidential-client, web-sso, client-secret, redirect-uri, refresh-token, pkce, status:accepted, promoted |
| /demarkus-library/plans/phase-1b-web-sso.md |
0.85 |
Phase 1b — Web SSO over the Broker \(two-repo plan\) |
demarkus-library, phase-1b, plan, broker, oauth, web-sso, confidential-client, mcp, session, device-flow, loopback, fable, two-repo, pkce, refresh-token, authorization-code, client-registry, status:wip |
| /demarkus-library/debugging.md |
0.70 |
demarkus-library — Debugging & Gotchas |
demarkus-library, debugging, gotcha, oauth, basic-auth, rfc6749, refresh-token, rotation, invalid-grant, broker, rate-limit, mcp-session, ci, argocd, secrets, federation, quic, reader-overlay, mark-worlds, htmx, authorization, floor |
| /plans/broker-auth-code-grant.md |
0.65 |
Plan: Broker Authorization Code Grant |
plan, broker, oauth, authorization-code, pkce, mcp, oidc, device-flow, refresh-token, discovery, kind-smoke, claude-code, knowledge-join, rfc-8252, redirect-uri, security, universe-onboarding, status:complete |
| /journal/2026-06-08.md |
0.65 |
2026-06-08 — Broker-global OIDC AllowDomains gate |
broker, oidc, allow-domains, hd, google-workspace, poc, claims-pointer-refactor, authorization, journal, helm-chart, customer-name-policy, refresh-token, kind-smoke, deploy-repo, debt, device-flow, auth-code-grant, gocritic |
| /journal/2026-06-11.md |
0.60 |
2026-06-11 — Broker confidential web-client support |
journal, broker, oauth, web-sso, confidential-client, phase-1b, client-auth, refresh-token, demarkus-library, web-clients, authorization-code, helm-chart, kind-smoke, adr, discovery, client-secret-basic |