feat(auth): add X.509 workload identity federation - #864

Open

jbeckwith-oai wants to merge 8 commits into

mainfrom

codex/x509-wif-java-sdk

Commits on Aug 17, 2026

feat(auth): add X.509 workload identity federation
jbeckwith-oai
committed
986c919
fix: preserve workload identity compatibility and retry safety
jbeckwith-oai
committed
4ea7849
fix(auth): bind X.509 tokens to trusted API origins
jbeckwith-oai
committed
bd68e2a
fix(auth): harden X.509 trust and credential boundaries
jbeckwith-oai
committed
c748590
fix(auth): ignore superseded workload token refreshes
jbeckwith-oai
committed
287287b
fix(auth): reject Azure endpoints for X.509 workload identity
jbeckwith-oai
committed
5f9dbf0
fix(auth): normalize Azure workload identity provider origins
jbeckwith-oai
committed
cf42b11
fix(auth): validate bearer type and track sync refresh leases
jbeckwith-oai
committed
33ddd46