patch
COMPANION-APP-PHASE-3-OAUTH-PKCE.md
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect)
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).1. Scope decisions (owner-approved 2026-06-05)
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).1. Scope decisions (owner-approved 2026-06-05).D-P3.1 — Pure-then-bind (CONFIRMED)
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).1. Scope decisions (owner-approved 2026-06-05).D-P3.2 — Provider-agnostic core; client-registration boundary respected (CONFIRMED)
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).1. Scope decisions (owner-approved 2026-06-05).D-P3.3 — RFC 9207 iss: optional-but-validated (CONFIRMED)
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).2. Adversarial threat model → exact control
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).2. Adversarial threat model → exact control.table
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).3. Module contract — lib/companion-oauth-pkce.mjs
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).3. Module contract — lib/companion-oauth-pkce.mjs.table
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).4. Module contract — lib/companion-token-custody.mjs
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).5. RFC conformance
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).6. What Phase 5 must do to bind safely
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).7. Server-side OAuth gate (Phase 5 prerequisite)
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).8. Test obligations satisfied (gate §10, 7 tiers × 2 modules)
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).8. Test obligations satisfied (gate §10, 7 tiers × 2 modules).table
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).9. Deferred (explicitly not Phase 3)
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).Simple summary
3 days ago
insert
Companion App — Phase 3: OAuth Native/Public Client (PKCE + Loopback Redirect).Technical summary
3 days ago