Repository navigation

Require confidential clients to authenticate on the authorization_code grant - #83

Open

roborourke wants to merge 7 commits into

WP-API:mainfrom

humanmade:roborourke/Fix-get_type-private-auth-code-path-check

Open

Require confidential clients to authenticate on the authorization_code grant#83
roborourke wants to merge 7 commits into
WP-API:mainfrom
humanmade:roborourke/Fix-get_type-private-auth-code-path-check

Commits on Sep 17, 2026
- Declare the client authentication contract on ClientInterface
  
  roborourke
  and
  claude
  committed
  e1cfd57
- Add Client::requires_secret() for confidential clients
  
  roborourke
  and
  claude
  committed
  ca0ba9b
- Authenticate confidential clients on the authorization_code grant
  
  roborourke
  and
  claude
  committed
  12bfb41
Commits on Sep 23, 2026
- Merge remote-tracking branch 'upstream/main' into roborourke/Fix-get_type-private-auth-code-path-check
  roborourke
  committed
  5d60c35
- Send a Basic challenge for every failed header authentication
  
  roborourke
  and
  claude
  committed
  c766b49
Commits on Oct 7, 2026
- Merge upstream/main into roborourke/Fix-get_type-private-auth-code-path-check
  
  roborourke
  and
  claude
  committed
  a709d82
Commits on Oct 21, 2026
- Keep Application Passwords off the token endpoint's Basic header
  
  roborourke
  and
  claude
  committed
  602274f