fix(auth): harden X.509 workload identity integration - #3740

Merged

jbeckwith-oai merged 15 commits into

mainfrom

codex/x509-adversarial-hardening

Aug 27, 2026

Commits on Aug 27, 2026

fix(auth): harden X.509 workload identity integration
jbeckwith-oai
committed
b5ec9be
fix(auth): address X.509 review feedback
jbeckwith-oai
committed
65f5d41
fix(auth): preserve isolated X.509 caches across client copies
jbeckwith-oai
committed
cd32622
Merge branch 'main' into codex/x509-adversarial-hardening
jbeckwith-oai
authored
fcc4252
fix(auth): guard delegated and nested X.509 client requests
jbeckwith-oai
committed
3560cf4
fix(auth): guard lazily delegated X.509 HTTP requests
jbeckwith-oai
committed
01bc709
fix(auth): harden X.509 scope binding and refresh coordination
jbeckwith-oai
committed
928aef8
fix(auth): preserve caller-owned X.509 request hook lists
jbeckwith-oai
committed
a5f2701
fix(auth): distinguish auxiliary requests from protected traffic
jbeckwith-oai
committed
7f63c0e
fix(auth): preserve request provenance and release auxiliary state
jbeckwith-oai
committed
c7e7bc2
fix(auth): scope delegated requests before HTTPX auth flows
jbeckwith-oai
committed
29856a6
fix(auth): replace inherited authorization headers case-insensitively
jbeckwith-oai
committed
3040d80
Merge branch 'main' into codex/x509-adversarial-hardening
jbeckwith-oai
authored
d847951
fix(auth): retain protected scope across recursive request rebuilds
jbeckwith-oai
committed
7b91f07
fix(auth): bind x509 validation to scoped forwarding transports
jbeckwith-oai
committed
7a31bcc