Rename EnrolledKeyId → LocalKeyHandle; clarify AP enrollment key identifiers#22

Merged

dasiths merged 9 commits into

mainfrom

copilot/ap-enrollment-process-analysis

May 27, 2026

Commits on May 27, 2026

Add research and implementation plan for AP enrollment key naming
Copilot
authored
Rename EnrolledKeyId → LocalKeyHandle; default to JWK thumbprint
Copilot
authored
Update docs to use LocalKeyHandle and clarify AP/agent key separation
Copilot
authored
AgentConsole: use AP-published kid (AgentTokenKid) for jwks_uri scheme
Copilot
authored
Refactor key management and enhance jwks_uri support
dasiths
committed
Refactor key handling to use localKeyHandle instead of keyId in multiple components; enhance documentation for jkt-jwt signing mode and agent key management.
dasiths
committed
Add support for jkt-jwt signing mode in flow picker; enhance description for key rotation
dasiths
committed
Implement JKT-JWT support for key rotation; update error messages and enhance navigation
dasiths
committed
Add naming JWT security hardening (exp validation + jti replay detection)
dasiths
committed