Matthew Meszaros d0e8bc1c97 feat: add one-command MCP OAuth connect on api.warmbly.com/v1/mcp — RFC 7591 dynamic client registration for public PKCE clients (dcr.go), RFC 9728 protected-resource metadata + WWW-Authenticate challenge via MCPAuthMiddleware, /v1/mcp now accepts an API key or OAuth token, public-client auth with no secret and mandatory PKCE reusing the existing OAuth 2.1 server (nullable-org clients, migration 000066), executable-redirect-scheme hardening on the open register endpoint, plus mcp/oauth/authentication/endpoints docs

2026-07-16 08:57:19 +02:00

..

admin.go

Analytics & Tracking

2026-01-29 05:59:04 +01:00

apikey_test.go

feat: bound auth login network waits

2026-06-01 16:56:24 +02:00

apikey_usage.go

feat: full api key support across data routes

2026-05-24 11:59:05 +00:00

apikey.go

feat: let OAuth apps subscribe to webhooks by declaring a url/events/secret and materializing per-org endpoints gated by each grant's scopes, with secret rotation and delivery observability (migration 000050)

2026-06-15 08:11:20 +02:00

auth.go

Organization, Subscription, Inqueries, limits.

2026-01-27 05:55:48 +01:00

handler.go

feat: add an OAuth 2.1 authorization server (migration 000047 apps/codes/grants, app registration CRUD, authorization-code-with-PKCE authorize+token+refresh-rotation+revoke endpoints, RFC 8414 discovery, bearer-token validation wired into the auth middleware reusing the API-permission gates, scopes mapped to API permission bits)

2026-06-13 13:56:39 +02:00

idempotency_test.go

feat: bound auth login network waits

2026-06-01 16:56:24 +02:00

idempotency.go

feat: add api idempotency keys

2026-05-30 04:31:43 +00:00

internal_auth_test.go

feat: bound auth login network waits

2026-06-01 16:56:24 +02:00

internal_auth.go

infra(encryptedkeys): pluggable DEK store with HTTP proxy for workers

2026-05-27 14:42:11 +00:00

mcp.go

feat: add one-command MCP OAuth connect on api.warmbly.com/v1/mcp — RFC 7591 dynamic client registration for public PKCE clients (dcr.go), RFC 9728 protected-resource metadata + WWW-Authenticate challenge via MCPAuthMiddleware, /v1/mcp now accepts an API key or OAuth token, public-client auth with no secret and mandatory PKCE reusing the existing OAuth 2.1 server (nullable-org clients, migration 000066), executable-redirect-scheme hardening on the open register endpoint, plus mcp/oauth/authentication/endpoints docs

2026-07-16 08:57:19 +02:00

oidc.go

Add sample auth UI theme

2026-02-10 19:30:47 +01:00

organization.go

Organization, Subscription, Inqueries, limits.

2026-01-27 05:55:48 +01:00

ratelimit.go

ci: drop unused/unconvert/gosimple + shadow/nilness, run gofmt

2026-05-23 16:54:12 +00:00

request_id_test.go

feat: bound auth login network waits

2026-06-01 16:56:24 +02:00

request_id.go

feat: add api request ids

2026-05-30 04:26:12 +00:00

version.go

feat: serve the entire customer API (auth + resources) only under /v1 with no unversioned alias, and repoint the web and admin clients to the versioned base accordingly

2026-06-13 07:18:23 +02:00