feat(auth): mount the device grant under OIDC, and keep its re-auth gate honest - #4304

Open

appletechie wants to merge 5 commits into

omnigent-ai:mainfrom

appletechie:feat/device-grant-oidc

Commits on Aug 7, 2026

feat(auth): mount the device grant under OIDC, and keep its re-auth gate honest
appletechie
committed
c3e52b9
fix(auth): force re-auth on every consent bounce, and refuse GitHub OAuth
appletechie
committed
920a4f2
fix(auth): verify the forced re-authentication instead of only asking for it
appletechie
committed
907ec32
fix(auth): prove the re-authentication on the session, not with iat
appletechie
committed
9041d67
fix(auth): percent-encode the bounce return_to, and close three test gaps
appletechie
committed
db6f689