feat!: redesign identity linking with mechanism registry and capability-driven scopes#265

Merged

amithanda merged 16 commits intoUniversal-Commerce-Protocol:mainfrom

amithanda:feature/identity-linking-extensibility

Mar 19, 2026

Commits on Mar 18, 2026

docs: implement mechanism registry and capability-driven scope negotiation for identity linking
amithanda
committed
docs: add capability profile examples and schema for identity linking discovery
amithanda
committed
feat: Add explicit `discovery_endpoint` to OAuth2 identity linking, define a metadata resolution hierarchy, and clarify scope derivation in capability negotiation.
amithanda
committed
feat: Introduce and apply `identity_scopes` to capability and checkout schemas for OAuth2 scope derivation.
amithanda
committed
feat: Add identity scope pattern validation, clarify identity linking discovery failure, and introduce scope dependency pruning.
amithanda
committed
feat: Improve identity linking security by adding PKCE and issuer validation requirements, and remove `identity_scopes` from the capability schema.
amithanda
committed
docs: Add issuer normalization rule for identity linking and update example markdown.
amithanda
committed
refactor: Simplify platform schema in identity linking by removing unnecessary properties from the JSON schema
amithanda
committed
feat: Update identity scopes to use reverse DNS notation and enhance identity linking documentation with mechanism selection algorithm and scope naming conventions.
amithanda
committed
docs: Clarify identity linking process by updating scope dependency pruning rules and enhancing identity linking schema description with annotation conventions.
amithanda
committed
docs: Update identity linking documentation to clarify scope derivation rules and enhance schema definition for authentication mechanisms.
amithanda
committed
docs: Refine authentication mechanism schema description for clarity and update scope derivation language in documentation.
amithanda
committed
docs: Update identity linking documentation to include issuer normalization details and enhance JSON schema by adding required config property.
amithanda
committed
docs: Enhance consent screen guidelines in identity linking documentation to ensure clear and grouped permission presentation for users.
amithanda
committed
docs: Clarify authorization process in identity linking documentation by specifying exact scope requests and enforcing strict issuer comparison without normalization.
amithanda
committed

Commits on Mar 19, 2026

docs: Update identity linking documentation to enforce mandatory abortion of the process when no secured resources are available and refine scope mapping for CheckoutSession.
amithanda
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat!: redesign identity linking with mechanism registry and capability-driven scopes#265

feat!: redesign identity linking with mechanism registry and capability-driven scopes#265
amithanda merged 16 commits intoUniversal-Commerce-Protocol:mainfrom
amithanda:feature/identity-linking-extensibility

Commits on Mar 18, 2026

docs: implement mechanism registry and capability-driven scope negotiation for identity linking

docs: add capability profile examples and schema for identity linking discovery

feat: Add explicit `discovery_endpoint` to OAuth2 identity linking, define a metadata resolution hierarchy, and clarify scope derivation in capability negotiation.

feat: Introduce and apply `identity_scopes` to capability and checkout schemas for OAuth2 scope derivation.

feat: Add identity scope pattern validation, clarify identity linking discovery failure, and introduce scope dependency pruning.

feat: Improve identity linking security by adding PKCE and issuer validation requirements, and remove `identity_scopes` from the capability schema.

docs: Add issuer normalization rule for identity linking and update example markdown.

refactor: Simplify platform schema in identity linking by removing unnecessary properties from the JSON schema

feat: Update identity scopes to use reverse DNS notation and enhance identity linking documentation with mechanism selection algorithm and scope naming conventions.

docs: Clarify identity linking process by updating scope dependency pruning rules and enhancing identity linking schema description with annotation conventions.

docs: Update identity linking documentation to clarify scope derivation rules and enhance schema definition for authentication mechanisms.

docs: Refine authentication mechanism schema description for clarity and update scope derivation language in documentation.

docs: Update identity linking documentation to include issuer normalization details and enhance JSON schema by adding required config property.

docs: Enhance consent screen guidelines in identity linking documentation to ensure clear and grouped permission presentation for users.

docs: Clarify authorization process in identity linking documentation by specifying exact scope requests and enforcing strict issuer comparison without normalization.

Commits on Mar 19, 2026

docs: Update identity linking documentation to enforce mandatory abortion of the process when no secured resources are available and refine scope mapping for CheckoutSession.