Repository navigation

SN/I certificate over mTLS Proof-of-Possession - #938

Open

Robbie-Microsoft wants to merge 22 commits into

devfrom

rginsburg/sni-mtls-pop

Open

SN/I certificate over mTLS Proof-of-Possession#938
Robbie-Microsoft wants to merge 22 commits into
devfrom
rginsburg/sni-mtls-pop

Commits on Jul 7, 2026
- Add SNI certificate support over mTLS Proof-of-Possession
  
  Robbie-Microsoft
  and
  Copilot
  committed
  dd4f13a
Commits on Jul 8, 2026
- Use SN/I-allow-listed app for mTLS PoP e2e tests
  
  Robbie-Microsoft
  and
  Copilot
  committed
  81c3eb7
- Enumerate key-bound ATs on sign-out and account removal
  
  Robbie-Microsoft
  and
  Copilot
  committed
  224a003
- Fail closed on mTLS PoP token_type downgrade; honor verify; lock session build
  
  Robbie-Microsoft
  and
  Copilot
  committed
  02ccacb
- Isolate key/ext-bound ATs unconditionally; normalize verify=None
  
  Robbie-Microsoft
  and
  Copilot
  committed
  51adcec
- Address review comments on mTLS PoP cert/key handling
  
  Robbie-Microsoft
  and
  Copilot
  committed
  ba697e8
Commits on Jul 30, 2026
- Harden mTLS PoP e2e: prove token at resource + naming matrix
  
  Robbie-Microsoft
  and
  Copilot
  committed
  b79166d
- Strengthen X509->Bearer e2e: assert cert binding is absent
  
  Robbie-Microsoft
  and
  Copilot
  committed
  aaf62c1
- Note _call_graph_with_mtls_pop_token is shared with FIC #939
  
  Robbie-Microsoft
  and
  Copilot
  committed
  fec7d7f
- Split mtls_pop/Bearer e2e by region (drop regional PoP cell)
  
  Robbie-Microsoft
  and
  Copilot
  committed
  b9233c6
- Merge origin/dev into sni-mtls-pop (resync #938 with base)
  
  Robbie-Microsoft
  and
  Copilot
  committed
  4ec592f
Commits on Oct 9, 2026
- Merge origin/dev into sni-mtls-pop
  Robbie-Microsoft
  committed
  e226f92
Commits on Oct 21, 2026
- Merge origin/dev into sni-mtls-pop
  
  Robbie-Microsoft
  and
  Copilot
  committed
  077f11f
Commits on Oct 22, 2026
- Address mTLS PoP review comments
  
  Robbie-Microsoft
  and
  Copilot
  committed
  0424c53
- Add downstream mTLS binding context
  
  Robbie-Microsoft
  and
  Copilot
  committed
  d3a120c
Commits on Oct 23, 2026
- Fix mTLS cache isolation and transport compatibility
  
  Robbie-Microsoft
  and
  Copilot
  committed
  9e35a33
- Fix mTLS cache compatibility and transport review findings
  
  Robbie-Microsoft
  and
  Copilot
  committed
  e574edd
- Avoid cache persistence reentry and quadratic migration cleanup
  
  Robbie-Microsoft
  and
  Copilot
  committed
  6f34f2e
- Reject mixed-case raw mTLS token types before cache lookup
  
  Robbie-Microsoft
  and
  Copilot
  committed
  2de965f
- Reject redirects in the owned mTLS token transport
  
  Robbie-Microsoft
  and
  Copilot
  committed
  dd07393
- Fail required certificate E2E scenarios on missing lab configuration
  
  Robbie-Microsoft
  and
  Copilot
  committed
  1fceb2f
- Fix certificate fixture regression when release tag is unset
  
  Robbie-Microsoft
  and
  Copilot
  committed
  f67c680

Commits

Commits on Jul 7, 2026

Commits on Jul 8, 2026

Commits on Jul 30, 2026

Commits on Oct 9, 2026

Commits on Oct 21, 2026

Commits on Oct 22, 2026

Commits on Oct 23, 2026