| /adr/0001-broker-confidential-web-clients.md |
0.85 |
ADR 0001 — Broker confidential web-client registry |
adr, decision, broker, oauth, confidential-client, web-sso, client-secret, redirect-uri, refresh-token, pkce, status:accepted, promoted |
| /demarkus-library/plans/phase-1b-web-sso.md |
0.85 |
Phase 1b — Web SSO over the Broker \(two-repo plan\) |
demarkus-library, phase-1b, plan, broker, oauth, web-sso, confidential-client, mcp, session, device-flow, loopback, fable, two-repo, pkce, refresh-token, authorization-code, client-registry, status:wip |
| /demarkus-library/adr/0004-broker-web-sso.md |
0.80 |
ADR 0004 — Broker confidential web client + redirect SSO \(reject device flow\) |
demarkus-library, adr, decision, phase-1b, broker, oauth, web-sso, device-flow, confidential-client, architecture, separation-of-concerns, status:accepted, session-cookie, security, rfc-8252, mcp, authorization-code |
| /demarkus-library/journal/2026-06-11.md |
0.60 |
2026-06-11 — demarkus-library Phase 1b: plan + steps 2.2/2.5 |
demarkus-library, journal, phase-1b, oauth, session, single-flight, broker, confidential-client, pkce, basic-auth, gotcha, mcp-go, session-pool, federation, multi-world, tls, mkcert, frontmatter, turnstile, web-sso |
| /journal/2026-06-11.md |
0.60 |
2026-06-11 — Broker confidential web-client support |
journal, broker, oauth, web-sso, confidential-client, phase-1b, client-auth, refresh-token, demarkus-library, web-clients, authorization-code, helm-chart, kind-smoke, adr, discovery, client-secret-basic |