Issues

• saml: add adversarial fixtures, interoperability tests and integration guidance

  hyperscale-stack/security#88 · Filter by author euskadi31 opened on Oct 9, 2026

• saml/sp: add an optional SAML 2.0 Service Provider for enterprise federation

  hyperscale-stack/security#87 · Filter by author euskadi31 opened on Oct 9, 2026

• oidc: add interoperability, negative security tests and documented conformance coverage

  hyperscale-stack/security#86 · Filter by author euskadi31 opened on Oct 9, 2026

• oidc/client: add a reusable OIDC relying party with secure callback validation

  hyperscale-stack/security#85 · Filter by author euskadi31 opened on Oct 9, 2026

• oidc/provider: implement Authorization Code + PKCE, ID Tokens, Discovery and UserInfo

  hyperscale-stack/security#84 · Filter by author euskadi31 opened on Oct 9, 2026

• oauth2: add safe protocol extension points for an optional OIDC provider

  hyperscale-stack/security#83 · Filter by author euskadi31 opened on Oct 9, 2026

• oauth2/store: make refresh-family revocation reliable across races and storage failures

  hyperscale-stack/security#82 · Filter by author euskadi31 opened on Oct 9, 2026

• oauth2: add explicit caller authorization for token introspection

  hyperscale-stack/security#81 · Filter by author euskadi31 opened on Oct 9, 2026

• oauth2: retain authorization-code replay metadata to revoke previously issued tokens

  hyperscale-stack/security#80 · Filter by author euskadi31 opened on Oct 9, 2026

• oauth2/pkce: validate verifier and challenge syntax before accepting PKCE

  hyperscale-stack/security#79 · Filter by author euskadi31 opened on Oct 9, 2026

• oauth2: enforce refresh-token rotation required by the active security profile

  hyperscale-stack/security#78 · Filter by author euskadi31 opened on Oct 9, 2026