✨ feat(auth): pkg/auth skeleton for OpenID Connect (ADR-0028 Phase B prep) #69
Reference in New Issue
Block a user
Delete Branch "vibe/batch3-task-x-pkg-auth"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Add pkg/auth package with OIDCClient skeleton for OpenID Connect (ADR-0028 Phase B prep).\n\nNew files:\n- pkg/auth/oidc.go: OIDCClient struct with discovery/JWKS caching, NewOIDCClient constructor, Discovery/TokenResponse/IDTokenClaims types, TODO skeleton methods (Discover, RefreshJWKS, ExchangeCode, ValidateIDToken)\n- pkg/auth/oidc_test.go: smoke test for NewOIDCClient\n\nAll methods are TODO placeholders - HTTP handlers wire-up happens in pkg/user/api/oidc_handler.go (Phase B.3).