psa-systems/bunyip
Watch
9
0
Fork
You've already forked bunyip
 0
Code Issues Pull requests Projects Releases 18 Packages Wiki Activity Actions

feat(oidc): register lets-chat-psa as confidential OIDC client (LC-22) #168

Merged
YousifShkara merged 1 commit from feat/lc-22-register-lets-chat-oidc-client into main 2026-06-18 06:58:13 +02:00
Conversation 0 Commits 1 Files changed 1 +52
YousifShkara commented 2026-06-18 05:32:02 +02:00
Owner
Copy link

Companion seed migration for the lets-chat pure-RP cutover at
docs/lets-chat/sso/bunyip-only/. Slot client_id ...0000000c per the spec.

Confidential client (client_secret_basic + PKCE), scopes openid + email only
(no offline_access; lets-chat does not consume refresh tokens), redirect URI
pinned to https://chat.a8n.systems/auth/bunyip/callback,
post_logout_redirect_uris pre-seeded for the v2 RP-initiated logout
follow-up.

The plaintext client_secret is delivered to the operator out-of-band and
lands in lets-chat's LETS_CHAT_BUNYIP_SSO_CLIENT_SECRET env var.

#LC-22

Co-Authored-By: Claude Opus 4.7 noreply@anthropic.com

Companion seed migration for the lets-chat pure-RP cutover at docs/lets-chat/sso/bunyip-only/. Slot client_id ...0000000c per the spec. Confidential client (client_secret_basic + PKCE), scopes openid + email only (no offline_access; lets-chat does not consume refresh tokens), redirect URI pinned to https://chat.a8n.systems/auth/bunyip/callback, post_logout_redirect_uris pre-seeded for the v2 RP-initiated logout follow-up. The plaintext client_secret is delivered to the operator out-of-band and lands in lets-chat's `LETS_CHAT_BUNYIP_SSO_CLIENT_SECRET` env var. #LC-22 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
feat(oidc): register lets-chat-psa as confidential OIDC client (LC-22)
All checks were successful
Check / fmt / clippy / build / test (pull_request) Successful in 2m0s
Details
Create release / Create release from merged PR (pull_request) Has been skipped
Details
c65e640212 
Companion seed migration for the lets-chat pure-RP cutover at
docs/lets-chat/sso/bunyip-only/. Slot client_id ...0000000c per the spec.

Confidential client (client_secret_basic + PKCE), scopes openid + email only
(no offline_access; lets-chat does not consume refresh tokens), redirect URI
pinned to https://chat.a8n.systems/auth/bunyip/callback,
post_logout_redirect_uris pre-seeded for the v2 RP-initiated logout
follow-up.

The plaintext client_secret is delivered to the operator out-of-band and
lands in lets-chat's `LETS_CHAT_BUNYIP_SSO_CLIENT_SECRET` env var.

#LC-22

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
YousifShkara deleted branch feat/lc-22-register-lets-chat-oidc-client 2026-06-18 06:58:13 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
YousifShkara
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
psa-systems/bunyip!168
No description provided.